agenttesla | e5bc010112dd7fddb25bcd34ca63a7b9784e1575c432a5faa1d37fb23c90d5db | Triage™

Login
Reports

Overview

overview

Static

static

SecuriteIn...32.exe

windows7_x64

SecuriteIn...32.exe

windows10-2004_x64

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.generic.ml.3332.27068
Size 268KB
Sample220608-taf8daecfk
SHA256 e5bc010112dd7fddb25bcd34ca63a7b9784e1575c432a5faa1d37fb23c90d5db
MD5 c13ec8ea2857da3fc5f28d6798f278d1
SHA1 89e0f31fddc9903fb87ba6cb6f1f8c71bf8e183d
SHA512 29e5e3ca5a9081d3923c4bc0a0425251e24cf2e240ad9e88c07bcae84ca942715a261f7ab24dfcdd3baedb59af156fa6704c08ebd87ffd8b05872e32c814859d
MD5 SHA1 SHA512

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

SecuriteInfo.com.generic.ml.3332.exe

Resource

win7-20220414-en

windows7_x64

0 signatures

0 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

SecuriteInfo.com.generic.ml.3332.exe

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Credentials

Protocol
smtp
Host
mail.privateemail.com
Port
587
Username
[email protected]
Password
@newones.xyz

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.privateemail.com
Port
587
Username
[email protected]
Password
@newones.xyz
Email to
[email protected]

Targets

- Target
  SecuriteInfo.com.generic.ml.3332.27068
- Size 268KB
- SHA256 e5bc010112dd7fddb25bcd34ca63a7b9784e1575c432a5faa1d37fb23c90d5db
- MD5 c13ec8ea2857da3fc5f28d6798f278d1
- SHA1 89e0f31fddc9903fb87ba6cb6f1f8c71bf8e183d
- SHA512 29e5e3ca5a9081d3923c4bc0a0425251e24cf2e240ad9e88c07bcae84ca942715a261f7ab24dfcdd3baedb59af156fa6704c08ebd87ffd8b05872e32c814859d
- MD5 SHA1 SHA512
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy