agenttesla | 18bcae6310212c3e9d4433e5f9fd2ec0755f735554fc08a25fcd2e60bd9142e8 | Triage™

Login
Reports

Overview

overview

Static

static

1

immagine d...ti.exe

windows7-x64

immagine d...ti.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
immagine degli elementi elencati.exe
Size 734KB
Sample230419-mw9cqaaa62
SHA256 18bcae6310212c3e9d4433e5f9fd2ec0755f735554fc08a25fcd2e60bd9142e8
MD5 2ac29337ee58bb1531433d7abc735ec9
SHA1 2c68d72f38f6ac77916174c7805a0f4d4b03541c
SHA512 c25a6719043918a0be5f1b76c700e733fa2b5131fdb37ad37b7c0d4201e366e96f4ee69c9e8d6d59d38246934cfb3b06a8bc7915497d0e99301fff0423a4a5c7
SSDEEP 6144:1KF7+lHh0W/dAK8XLCtqX5ARbQOcEbiuAmsYXgv3E4OMdwTQP7eUjzyEc:1oIHhiXOBcQiHrYXO3E+wcT1
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

immagine degli elementi elencati.exe

Resource

win7-20230220-en

windows7-x64

7 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

immagine degli elementi elencati.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

7 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.namebadgesinternational.com.sg
Port
587
Username
[email protected]
Password
lezio9urpayt
Email to
[email protected]

Targets

- Target
  immagine degli elementi elencati.exe
- Size 734KB
- SHA256 18bcae6310212c3e9d4433e5f9fd2ec0755f735554fc08a25fcd2e60bd9142e8
- MD5 2ac29337ee58bb1531433d7abc735ec9
- SHA1 2c68d72f38f6ac77916174c7805a0f4d4b03541c
- SHA512 c25a6719043918a0be5f1b76c700e733fa2b5131fdb37ad37b7c0d4201e366e96f4ee69c9e8d6d59d38246934cfb3b06a8bc7915497d0e99301fff0423a4a5c7
- SSDEEP 6144:1KF7+lHh0W/dAK8XLCtqX5ARbQOcEbiuAmsYXgv3E4OMdwTQP7eUjzyEc:1oIHhiXOBcQiHrYXO3E+wcT1
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy