agenttesla | f9095e7206863ac5ab43bca825e7fd649d3deabcd5fac2bb409bbb77751580fe | Triage™

Login
Reports

Overview

overview

Static

static

3

statement ...nt.exe

windows7-x64

statement ...nt.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
statement of account.exe
Size 472KB
Sample230425-rwtz9aah22
SHA256 f9095e7206863ac5ab43bca825e7fd649d3deabcd5fac2bb409bbb77751580fe
MD5 eef87db61523a857a5c79d9d51c33f27
SHA1 cdea736f0e6e46c99498981dbdb6cd33100eb41d
SHA512 3a6a71559f25b01a883f515b10bc8e6a76ae5d7b35744e602ae3ed74b74c5b59431d1893b3b5bbabe3f94e3871dc4de8af626a0ef7d88ab0b3b1a8a08121069f
SSDEEP 6144:18h8K+MhRXu5zSjz3kZ4uyzXrJoi6jlf228u9yCRSEqY3OyULClJPN:18j9RXu52bBuyj1o5jw2LY1HO
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

statement of account.exe

Resource

win7-20230220-en

windows7-x64

8 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

statement of account.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

8 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.expertsconsultgh.co
Port
587
Username
[email protected]
Password
Oppong.2012
Email to
[email protected]

Targets

- Target
  statement of account.exe
- Size 472KB
- SHA256 f9095e7206863ac5ab43bca825e7fd649d3deabcd5fac2bb409bbb77751580fe
- MD5 eef87db61523a857a5c79d9d51c33f27
- SHA1 cdea736f0e6e46c99498981dbdb6cd33100eb41d
- SHA512 3a6a71559f25b01a883f515b10bc8e6a76ae5d7b35744e602ae3ed74b74c5b59431d1893b3b5bbabe3f94e3871dc4de8af626a0ef7d88ab0b3b1a8a08121069f
- SSDEEP 6144:18h8K+MhRXu5zSjz3kZ4uyzXrJoi6jlf228u9yCRSEqY3OyULClJPN:18j9RXu52bBuyj1o5jw2LY1HO
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy