agenttesla | d50d87e8d4b9b1ca179e4228ad868f4432f3bc9cbbcb18821f86dfff0bfe1ce0 | Triage™

Login
Reports

Overview

overview

Static

static

INVOICE NO 0404.exe

windows7_x64

INVOICE NO 0404.exe

windows10-2004_x64

Sharing

Copy URL Twitter E-mail

General

Target
INVOICE NO 0404.exe
Size 467KB
Sample220607-kr61pagghk
SHA256 d50d87e8d4b9b1ca179e4228ad868f4432f3bc9cbbcb18821f86dfff0bfe1ce0
MD5 d3c817f4e1a2579f8c329dfddee71877
SHA1 20b5b25e474ae7261d413e5c3e407304989311e0
SHA512 d83d9acc0ee6e2ce85b759e74fdb4e03c23f6ac1fef7e0dab149561b7fd5c70a1377867374aa0c3765a9cdbf5fd61c271a2bc83ab78c192e0f8a1aa42dd8aa17
MD5 SHA1 SHA512

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

INVOICE NO 0404.exe

Resource

win7-20220414-en

windows7_x64

0 signatures

0 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

INVOICE NO 0404.exe

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.hpi.net.in
Port
587
Username
[email protected]
Password
iphisnsin2018*123
Email to
[email protected]

Extracted

Credentials

Protocol
smtp
Host
mail.hpi.net.in
Port
587
Username
[email protected]
Password
iphisnsin2018*123

Targets

- Target
  INVOICE NO 0404.exe
- Size 467KB
- SHA256 d50d87e8d4b9b1ca179e4228ad868f4432f3bc9cbbcb18821f86dfff0bfe1ce0
- MD5 d3c817f4e1a2579f8c329dfddee71877
- SHA1 20b5b25e474ae7261d413e5c3e407304989311e0
- SHA512 d83d9acc0ee6e2ce85b759e74fdb4e03c23f6ac1fef7e0dab149561b7fd5c70a1377867374aa0c3765a9cdbf5fd61c271a2bc83ab78c192e0f8a1aa42dd8aa17
- MD5 SHA1 SHA512
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Drops file in Drivers directory
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy