agenttesla | ea0ea74cfda886ded0a227a990847197c636a38533c4ea211e07c3dc17ab4e96 | Triage™

Login
Reports

Overview

overview

Static

static

TT copy fo...00.exe

windows7_x64

TT copy fo...00.exe

windows10-2004_x64

5

Sharing

Copy URL Twitter E-mail

General

Target
TT copy for $39,500.exe
Size 1.3MB
Sample220217-he9jyabcdj
SHA256 ea0ea74cfda886ded0a227a990847197c636a38533c4ea211e07c3dc17ab4e96
MD5 fd6e3584b461648ca77187a9b4adb947
SHA1 3ae21a10381de7443539550713478aa906b31e9a
SHA512 7aae62269ff0fd1625dbbf6addbc3644bd4ae572fcc0ba2d2e1b1368aa79405fba047aed2b33197b218ee827955b8121be18fadc5b15d7876c3fadfd9951042f
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

TT copy for $39,500.exe

Resource

win7-en-20211208

windows7_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Behavioral task

behavioral2

Sample

TT copy for $39,500.exe

Resource

win10v2004-en-20220112

windows10-2004_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
us2.smtp.mailhostbox.com
Port
587
Username
[email protected]
Password
RDh!TxR)U8

Targets

- Target
  TT copy for $39,500.exe
- Size 1.3MB
- SHA256 ea0ea74cfda886ded0a227a990847197c636a38533c4ea211e07c3dc17ab4e96
- MD5 fd6e3584b461648ca77187a9b4adb947
- SHA1 3ae21a10381de7443539550713478aa906b31e9a
- SHA512 7aae62269ff0fd1625dbbf6addbc3644bd4ae572fcc0ba2d2e1b1368aa79405fba047aed2b33197b218ee827955b8121be18fadc5b15d7876c3fadfd9951042f
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

© 2018-2026

Terms | Privacy