agenttesla | da7b4d88149e640933fbad7a71fb4eb8c102c226873efedba4820dc9b1d3958a | Triage™

Login
Reports

Overview

overview

Static

static

PO56894833.exe

windows7_x64

PO56894833.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
PO56894833.cab
Size 547KB
Sample211012-d5t5qabacq
SHA256 da7b4d88149e640933fbad7a71fb4eb8c102c226873efedba4820dc9b1d3958a
MD5 ee845debf2798fabded79884a4ba1666
SHA1 fd6743e7994187c54386a9033ff14e73187b1e36
SHA512 de3cda72a6891cb30a02853ca77f9b8a8a6b7555079b85d30a4a9055f913745ebc9189c74e12f9805360ada7dbf644b32284f5c5b0ecf7c079c64769132791fc
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

PO56894833.exe

Resource

win7-en-20210920

windows7_x64

0 signatures

0 seconds

agenttesla keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

PO56894833.exe

Resource

win10v20210408

windows10_x64

0 signatures

0 seconds

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot1697675911:AAHV0Bbn9deoaAv_7ZCAnyZh1OG-0RuJcOo/sendDocument

Targets

- Target
  PO56894833.exe
- Size 756KB
- SHA256 4eaf4ef36172aca924bc5501215112d4675390a7b4e14e6bc70f948494779a00
- MD5 4f8ece228c6f282d6928314659e99006
- SHA1 7e25b3da7534284d27dd5de216ef38939247d3ba
- SHA512 8d37324e795272f431f3e06697893bce8e2e552c843e64f3cc3677ea0fe98e9cbb84b9df4be158f0c42fb1ac320d103cf7ebbe1c09510a90d72a1c084131281a
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy