agenttesla | 5c9f3d90a3756fef76d7345a7ee33829d2775bf9079ed75f0f0a1007fae07805 | Triage™

Login
Reports

Overview

overview

Static

static

3

BANK DETAILS (2).exe

windows7-x64

BANK DETAILS (2).exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
BANK DETAILS (2).exe
Size 451KB
Sample230426-ha7jsafe73
SHA256 5c9f3d90a3756fef76d7345a7ee33829d2775bf9079ed75f0f0a1007fae07805
MD5 246e58f9efd0dc6eeca2007d4be59783
SHA1 dde87c20511eacb0bcd4e824855c1f205764329c
SHA512 e559bedc30fe205f0e7b5a33a6ee14972b56504b0f1687d70e7f87859022408a7a8c66f64f450522cb11ab9cb0811b6df783d6741fcbb2947986addeaf6cd8f0
SSDEEP 6144:fb6ms+flT/KFO/70Desg0wGEFaVQUaQtkhhwvKUA6S2wSbGN:fGms41CIT09g0wGE6Khhwva6Ze
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

BANK DETAILS (2).exe

Resource

win7-20230220-en

windows7-x64

7 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

BANK DETAILS (2).exe

Resource

win10v2004-20230220-en

windows10-2004-x64

7 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.southernboilers.org
Port
587
Username
[email protected]
Password
Sksmoke2018#
Email to
[email protected]

Targets

- Target
  BANK DETAILS (2).exe
- Size 451KB
- SHA256 5c9f3d90a3756fef76d7345a7ee33829d2775bf9079ed75f0f0a1007fae07805
- MD5 246e58f9efd0dc6eeca2007d4be59783
- SHA1 dde87c20511eacb0bcd4e824855c1f205764329c
- SHA512 e559bedc30fe205f0e7b5a33a6ee14972b56504b0f1687d70e7f87859022408a7a8c66f64f450522cb11ab9cb0811b6df783d6741fcbb2947986addeaf6cd8f0
- SSDEEP 6144:fb6ms+flT/KFO/70Desg0wGEFaVQUaQtkhhwvKUA6S2wSbGN:fGms41CIT09g0wGE6Khhwva6Ze
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy