agenttesla | 4e1a7d2b797ea44a290abc5095dd8f8791fe14088d519449da4bc499a2ff1066 | Triage™

Login
Reports

Overview

overview

Static

static

pleas.exe

windows7_x64

pleas.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
pleas.exe
Size 457KB
Sample210914-e11blsegd4
SHA256 4e1a7d2b797ea44a290abc5095dd8f8791fe14088d519449da4bc499a2ff1066
MD5 4b5f4d60b70efd2f25ac724a5096a4c6
SHA1 f1491ccfddbe104abb09f963e6216d72605c5d8a
SHA512 624310319ba6ee1a2c58726d2e574eb9ad36ecb8f789cf04675b9f391b188883f62831d28f3498f32c78e247cff721ac1c55eff176653a592c428af4bf66d057
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

pleas.exe

Resource

win7v20210408

windows7_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Behavioral task

behavioral2

Sample

pleas.exe

Resource

win10-en

windows10_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.upgcambodia.com
Port
587
Username
[email protected]
Password
stock3168

Targets

- Target
  pleas.exe
- Size 457KB
- SHA256 4e1a7d2b797ea44a290abc5095dd8f8791fe14088d519449da4bc499a2ff1066
- MD5 4b5f4d60b70efd2f25ac724a5096a4c6
- SHA1 f1491ccfddbe104abb09f963e6216d72605c5d8a
- SHA512 624310319ba6ee1a2c58726d2e574eb9ad36ecb8f789cf04675b9f391b188883f62831d28f3498f32c78e247cff721ac1c55eff176653a592c428af4bf66d057
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

agentteslakeyloggerpersistencespywarestealertrojan

© 2018-2026

Terms | Privacy