agenttesla | 7c995e143ae79e393513d3d3af5a2f86ea154ed96fa585ac98aa88838fb505ee | Triage™

Login
Reports

Overview

overview

Static

static

PO.exe

windows7_x64

PO.exe

windows10-2004_x64

Sharing

Copy URL Twitter E-mail

General

Target
PO.r15
Size 406KB
Sample220516-mydc3abchl
SHA256 7c995e143ae79e393513d3d3af5a2f86ea154ed96fa585ac98aa88838fb505ee
MD5 0bef74936e070cb5c0dc09098a37454b
SHA1 cf6970d30f67934bd837462465435d6b233156e4
SHA512 e7047dc24f825f07dee84892322dbfffd5c9cd049223eeeaa9750108d23b6474e96b8a9f6a8630575caec1d0ac5b681f916c2e4dfeee0a255b502537dcd08c84
MD5 SHA1 SHA512

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

PO.exe

Resource

win7-20220414-en

windows7_x64

0 signatures

0 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

PO.exe

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Credentials

Protocol
smtp
Host
mail.petrogroup.co
Port
587
Username
[email protected]
Password
Petro@123

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.petrogroup.co
Port
587
Username
[email protected]
Password
Petro@123
Email to
[email protected]

Targets

- Target
  PO.exe
- Size 729KB
- SHA256 dba8ec09d04729a3bae55fc6d962fc7f03add01bc96b750f1f7889cbdba04fd5
- MD5 1ea7fc5bd2b94e9c62fd909787b07af4
- SHA1 9eccc230db6efafc960885b104617ddd448045d5
- SHA512 1c0e656fd532899d2c522e1efaafd6c615758795a7684ca8933ef6cea27bfe0a5076cc42b750ec54cd318d18921e7811a949fe5f8b306d9e867fc1ec3d777a3b
- MD5 SHA1 SHA512
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy