agenttesla | 540ea98c1188f5e8bf41cd359f02664181fb6d04acccfd4408de1e1f4ac203a0 | Triage™

Login
Reports

Overview

overview

Static

static

70654 SSEBACT.exe

windows7_x64

70654 SSEBACT.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
70654 SSEBACT.exe
Size 1012KB
Sample210804-8ddv4b9saj
SHA256 540ea98c1188f5e8bf41cd359f02664181fb6d04acccfd4408de1e1f4ac203a0
MD5 d9800e8fba18cddaa268db6782413a41
SHA1 8f2c84a4ae350025fdc55eb5827619e19bd4e526
SHA512 209801672f9622e08458158e0b1bfb225b5f9d39335ab0c6397d2c269619a8e47c2c5bc48c6909731e874dc3b0b9f74932f33a60257a2b44f644c2cf5285e87c
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

70654 SSEBACT.exe

Resource

win7v20210410

windows7_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Behavioral task

behavioral2

Sample

70654 SSEBACT.exe

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
uscentral50.myserverhosts.com
Port
587
Username
[email protected]
Password
waters@789

Targets

- Target
  70654 SSEBACT.exe
- Size 1012KB
- SHA256 540ea98c1188f5e8bf41cd359f02664181fb6d04acccfd4408de1e1f4ac203a0
- MD5 d9800e8fba18cddaa268db6782413a41
- SHA1 8f2c84a4ae350025fdc55eb5827619e19bd4e526
- SHA512 209801672f9622e08458158e0b1bfb225b5f9d39335ab0c6397d2c269619a8e47c2c5bc48c6909731e874dc3b0b9f74932f33a60257a2b44f644c2cf5285e87c
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

agentteslakeyloggerpersistencespywarestealertrojan

© 2018-2026

Terms | Privacy