agenttesla | cfba5dd939d2d7bfc08f500cdec99afcba91c463d70086c53dffd65dc1e965d8 | Triage™

Login
Reports

Overview

overview

Static

static

viva stub (2).exe

windows7_x64

viva stub (2).exe

windows10-2004_x64

Sharing

Copy URL Twitter E-mail

General

Target
viva stub (2).exe
Size 1.1MB
Sample220329-rdtlrsafam
SHA256 cfba5dd939d2d7bfc08f500cdec99afcba91c463d70086c53dffd65dc1e965d8
MD5 e36a2ec87a4f03c86797c483e8a2b4b2
SHA1 5542a7a221f430dd1c5e3d6270e7f463229a7926
SHA512 21e7b0ba328abc1672e9e6871e6385e678886385dcdafb35ca14657bc7b92484bf5f9b34053edda6f78925f72857aed3e8d9bfcfad9ebe518e74dff682a5ec0e
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

viva stub (2).exe

Resource

win7-20220311-en

windows7_x64

0 signatures

0 seconds

agenttesla keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

viva stub (2).exe

Resource

win10v2004-20220310-en

windows10-2004_x64

0 signatures

0 seconds

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.balertsecurity.co.nz
Port
587
Username
[email protected]
Password
CoL5Lts9Glh2
Email to
[email protected]

Targets

- Target
  viva stub (2).exe
- Size 1.1MB
- SHA256 cfba5dd939d2d7bfc08f500cdec99afcba91c463d70086c53dffd65dc1e965d8
- MD5 e36a2ec87a4f03c86797c483e8a2b4b2
- SHA1 5542a7a221f430dd1c5e3d6270e7f463229a7926
- SHA512 21e7b0ba328abc1672e9e6871e6385e678886385dcdafb35ca14657bc7b92484bf5f9b34053edda6f78925f72857aed3e8d9bfcfad9ebe518e74dff682a5ec0e
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy