agenttesla | 61e24054b2dac0a16fbc7c4099ffd96dfbe1463abde77a52974206b954e475ab | Triage™

Login
Reports

Overview

overview

Static

static

SecuriteIn...46.exe

windows7-x64

SecuriteIn...46.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.W32.AIDetectNet.01.15355.2546.exe
Size 683KB
Sample220829-m2wzkshda2
SHA256 61e24054b2dac0a16fbc7c4099ffd96dfbe1463abde77a52974206b954e475ab
MD5 7654e3395fc9b56f47a0043232be6536
SHA1 cf464d02bb9f262d2744704be624126fd1367fbd
SHA512 648dbaa8cab2692683f157532c5f56d921c938affae5212d8e747df3d64e01f2558d83f728a43167ed8e9ca7e9374d99b88d2bd5fba51059f09243da4e3b2fdf
SSDEEP 6144:dl3EaoRrw3Cyrwlf6QrE4YX6Rl8+NR+hs9x9BxLa7Pi6OZWyEfN2ajK5:dBEmO6r4YqRl8+NYGnxki1yLU
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

SecuriteInfo.com.W32.AIDetectNet.01.15355.2546.exe

Resource

win7-20220812-en

windows7-x64

8 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

SecuriteInfo.com.W32.AIDetectNet.01.15355.2546.exe

Resource

win10v2004-20220812-en

windows10-2004-x64

8 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Credentials

Protocol
ftp
Host
ftp.westeurotrans.ro
Port
21
Username
[email protected]
Password
27tQPzbF,OTZ

Extracted

Family

agenttesla

Credentials

Protocol
ftp
Host
ftp://ftp.westeurotrans.ro/
Port
21
Username
[email protected]
Password
27tQPzbF,OTZ

Targets

- Target
  SecuriteInfo.com.W32.AIDetectNet.01.15355.2546.exe
- Size 683KB
- SHA256 61e24054b2dac0a16fbc7c4099ffd96dfbe1463abde77a52974206b954e475ab
- MD5 7654e3395fc9b56f47a0043232be6536
- SHA1 cf464d02bb9f262d2744704be624126fd1367fbd
- SHA512 648dbaa8cab2692683f157532c5f56d921c938affae5212d8e747df3d64e01f2558d83f728a43167ed8e9ca7e9374d99b88d2bd5fba51059f09243da4e3b2fdf
- SSDEEP 6144:dl3EaoRrw3Cyrwlf6QrE4YX6Rl8+NR+hs9x9BxLa7Pi6OZWyEfN2ajK5:dBEmO6r4YqRl8+NYGnxki1yLU
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy