agenttesla | 52d2abb85de115be28c584f6801451e67ffb745e1a2bba4589cc42430e6029aa | Triage™

Login
Reports

Overview

overview

Static

static

Vereisten ...B).exe

windows7-x64

Vereisten ...B).exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
Vereisten voor bestellijst 220922.xlxs.pdf(~67KB).exe
Size 206KB
Sample220922-qq8qsabfb3
SHA256 52d2abb85de115be28c584f6801451e67ffb745e1a2bba4589cc42430e6029aa
MD5 782766d8fb64ac0de4accb3d971cb63b
SHA1 4eca0095a47c936adf2357100a73a8b89b8aa388
SHA512 76c4e9f13987f1bf28745e4cb53d8aaf8ef864f481399ed3115e8267f79fcc14b299a8ba94d7a06a71167e2e12809a8cba1092b0511d429c60adf66008b40ff9
SSDEEP 3072:WUa1zwTgRXMD1W01qfIUlrB3+f0+aZrC7X126+AEgFTQdP78jyhcHm:RqlRXMD1WrIUlowZmLh+AHTg8dG
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

Vereisten voor bestellijst 220922.xlxs.pdf(~67KB).exe

Resource

win7-20220812-en

windows7-x64

8 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

Vereisten voor bestellijst 220922.xlxs.pdf(~67KB).exe

Resource

win10v2004-20220901-en

windows10-2004-x64

8 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
ftp
Host
%2B
Port
21
Username
application/x-www-form-urlencoded
Password
image/jpg

C2

p=

Targets

- Target
  Vereisten voor bestellijst 220922.xlxs.pdf(~67KB).exe
- Size 206KB
- SHA256 52d2abb85de115be28c584f6801451e67ffb745e1a2bba4589cc42430e6029aa
- MD5 782766d8fb64ac0de4accb3d971cb63b
- SHA1 4eca0095a47c936adf2357100a73a8b89b8aa388
- SHA512 76c4e9f13987f1bf28745e4cb53d8aaf8ef864f481399ed3115e8267f79fcc14b299a8ba94d7a06a71167e2e12809a8cba1092b0511d429c60adf66008b40ff9
- SSDEEP 3072:WUa1zwTgRXMD1W01qfIUlrB3+f0+aZrC7X126+AEgFTQdP78jyhcHm:RqlRXMD1WrIUlowZmLh+AHTg8dG
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy