agenttesla | a7aaa3efb2f1d921fe7b46916a660bbd1fbf4d54deb3e81c9b05ee7e2362ef16 | Triage™

Login
Reports

Overview

overview

Static

static

SecuriteIn...06.exe

windows7-x64

SecuriteIn...06.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Trojan.PackedNET.1268.28806.5385
Size 209KB
Sample220824-xcbmfshegr
SHA256 a7aaa3efb2f1d921fe7b46916a660bbd1fbf4d54deb3e81c9b05ee7e2362ef16
MD5 5e71412f0aa4aea55ed1b871eafd148b
SHA1 f5fe9247c268526bd815253e57c620d923e3b5a6
SHA512 1b3e28fb1bba7e1afde20ba9088a3d257ddf9e3979e8ebe5aa0c724753b8b6495a3012b23c6e53d3a4711e589d23870fefccf0c238dc47e8339e355038b38216
SSDEEP 3072:WpX7PqAJdAxqvSRF/pJaWZmOVC0hdcMzqe+Xr0gsJHX4JWlRZDNezTQsC6YTJD:geMaF7asj7GMzl+XIgS34JaClC6YT
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

SecuriteInfo.com.Trojan.PackedNET.1268.28806.exe

Resource

win7-20220812-en

windows7-x64

6 signatures

150 seconds

agenttesla keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

SecuriteInfo.com.Trojan.PackedNET.1268.28806.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

9 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.botswlogistics.com
Port
587
Username
[email protected]
Password
*(QSTCj8

Targets

- Target
  SecuriteInfo.com.Trojan.PackedNET.1268.28806.5385
- Size 209KB
- SHA256 a7aaa3efb2f1d921fe7b46916a660bbd1fbf4d54deb3e81c9b05ee7e2362ef16
- MD5 5e71412f0aa4aea55ed1b871eafd148b
- SHA1 f5fe9247c268526bd815253e57c620d923e3b5a6
- SHA512 1b3e28fb1bba7e1afde20ba9088a3d257ddf9e3979e8ebe5aa0c724753b8b6495a3012b23c6e53d3a4711e589d23870fefccf0c238dc47e8339e355038b38216
- SSDEEP 3072:WpX7PqAJdAxqvSRF/pJaWZmOVC0hdcMzqe+Xr0gsJHX4JWlRZDNezTQsC6YTJD:geMaF7asj7GMzl+XIgS34JaClC6YT
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla keylogger spyware stealer trojan collection
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy