agenttesla | 13d90261f73ecaa7455ccdaf16de6d96b122e8829cbf0ffe84ab89fc2cf4cad2 | Triage™

Login
Reports

Overview

overview

Static

static

copy of de...gz.exe

windows7_x64

copy of de...gz.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
copy of declaration certificate�& Tan lette.exe.gz.exe
Size 1.6MB
Sample210726-9tya418pj6
SHA256 13d90261f73ecaa7455ccdaf16de6d96b122e8829cbf0ffe84ab89fc2cf4cad2
MD5 6670c19ddf28b94dc9832ef37a4b976f
SHA1 6e6116fca5d75635c5906ed87db698fad545f087
SHA512 979a3fb7ca18acba12a8c71d0893bc447826bfd4f1a7a6d13683c6ef00b315df4945e6a4cdf6da62c7a13a64c5aa56705c689e2847e7a267c592c0e48c55c35c
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

copy of declaration certificate�& Tan lette.exe.gz.exe

Resource

win7v20210408

windows7_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Behavioral task

behavioral2

Sample

copy of declaration certificate�& Tan lette.exe.gz.exe

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
server291.web-hosting.com
Port
587
Username
[email protected]
Password
riches22@123456

Targets

- Target
  copy of declaration certificate�& Tan lette.exe.gz.exe
- Size 1.6MB
- SHA256 13d90261f73ecaa7455ccdaf16de6d96b122e8829cbf0ffe84ab89fc2cf4cad2
- MD5 6670c19ddf28b94dc9832ef37a4b976f
- SHA1 6e6116fca5d75635c5906ed87db698fad545f087
- SHA512 979a3fb7ca18acba12a8c71d0893bc447826bfd4f1a7a6d13683c6ef00b315df4945e6a4cdf6da62c7a13a64c5aa56705c689e2847e7a267c592c0e48c55c35c
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Registry Run Keys / Startup Folder

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

agentteslakeyloggerpersistencespywarestealertrojan

© 2018-2026

Terms | Privacy