agenttesla | 2fa2a26a2f9ed53878ae4af0c986555f4bd39e41b79058469fb2c5d637bf671d | Triage™

Login
Reports

Overview

overview

Static

static

SOA.exe

windows7_x64

SOA.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
SOA.exe
Size 493KB
Sample210914-e3pynahghj
SHA256 2fa2a26a2f9ed53878ae4af0c986555f4bd39e41b79058469fb2c5d637bf671d
MD5 81722e362dbcabc8c10ec786ce454224
SHA1 f7dc58d0346e007884d72e593cbb63b71b92e5db
SHA512 3635f88c0db295a1839e78fb23156bc8a02b82914abd6bb123520ee12df289fcb4894a24707a9c19cdde32d472051a1528230ecade7b351abd67c58f082d9e6c
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

SOA.exe

Resource

win7-en

windows7_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Behavioral task

behavioral2

Sample

SOA.exe

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.citechco.net
Port
587
Username
[email protected]
Password
Webana@321#

Targets

- Target
  SOA.exe
- Size 493KB
- SHA256 2fa2a26a2f9ed53878ae4af0c986555f4bd39e41b79058469fb2c5d637bf671d
- MD5 81722e362dbcabc8c10ec786ce454224
- SHA1 f7dc58d0346e007884d72e593cbb63b71b92e5db
- SHA512 3635f88c0db295a1839e78fb23156bc8a02b82914abd6bb123520ee12df289fcb4894a24707a9c19cdde32d472051a1528230ecade7b351abd67c58f082d9e6c
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Drops file in Drivers directory
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

agentteslakeyloggerpersistencespywarestealertrojan

© 2018-2026

Terms | Privacy