agenttesla | 6de4569d9946cf92795964def925a371049e858558566d3e1c6305b214e3bfaa | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

f4c0bc871d...ce.exe

windows7_x64

f4c0bc871d...ce.exe

windows10-2004_x64

Sharing

General

Target

f4c0bc871d4fda60f269e65560677bce
Size

207KB
Sample

220503-qszwnaffg4
MD5

f4c0bc871d4fda60f269e65560677bce
SHA1

80814c2c159d0d296d1739731828dc44afdf4ccd
SHA256

6de4569d9946cf92795964def925a371049e858558566d3e1c6305b214e3bfaa
SHA512

c5dfa20ea8a47ac84fceefdb0b03afb4184b30286e59961f0faaa661833b6a6da545c176b7c52ac792999aaa5f7687a7e70cb99b62695132386d71d478f7847d

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

f4c0bc871d4fda60f269e65560677bce.exe

Resource

win7-20220414-en

agenttesla collection keylogger spyware stealer trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

f4c0bc871d4fda60f269e65560677bce.exe

Resource

win10v2004-20220414-en

agenttesla collection keylogger spyware stealer trojan

windows10-2004_x64

0 signatures

0 seconds

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot1864790886:AAGQEiJl4IaNXUWMw0XE6QZeaCalFJNRuTk/sendDocument

Targets

- Target
  
  f4c0bc871d4fda60f269e65560677bce
- Size
  
  207KB
- MD5
  
  f4c0bc871d4fda60f269e65560677bce
- SHA1
  
  80814c2c159d0d296d1739731828dc44afdf4ccd
- SHA256
  
  6de4569d9946cf92795964def925a371049e858558566d3e1c6305b214e3bfaa
- SHA512
  
  c5dfa20ea8a47ac84fceefdb0b03afb4184b30286e59961f0faaa661833b6a6da545c176b7c52ac792999aaa5f7687a7e70cb99b62695132386d71d478f7847d
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2025

Terms | Privacy