agenttesla | 45badb3e2efa57882d602f3d44dd40735f1e4b2a4c6221ad6573f591c7aa3062 | Triage™

Login
Reports

Overview

overview

Static

static

3

BANK DETAILS (2).exe

windows7-x64

BANK DETAILS (2).exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
BANK DETAILS (2).zip
Size 351KB
Sample230426-hccgeshe2w
SHA256 45badb3e2efa57882d602f3d44dd40735f1e4b2a4c6221ad6573f591c7aa3062
MD5 a741f3ee51b30a167d14e402b250a1f7
SHA1 cf79944f37e52e4ebbfeebe70e15ff0c763748e4
SHA512 a0c4dfce651d2a977871de99f1940fcd03be519d5f088955468a5ee6d45eb26e32de3b357a459c5975d03f0a718abe4cecb0b6bfcbf8aa68280aed3aee206cb9
SSDEEP 6144:YnGRx6BexzWO6mQ+fPT/iFM/70Dewg0AYE/aVcUqQtSDhqvK+AASul:YnOwBHmQ47KqT0Bg0AYEgEDhqvSAtl
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

BANK DETAILS (2).exe

Resource

win7-20230220-en

windows7-x64

7 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

BANK DETAILS (2).exe

Resource

win10v2004-20230220-en

windows10-2004-x64

7 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.southernboilers.org
Port
587
Username
[email protected]
Password
Sksmoke2018#
Email to
[email protected]

Targets

- Target
  BANK DETAILS (2).exe
- Size 451KB
- SHA256 5c9f3d90a3756fef76d7345a7ee33829d2775bf9079ed75f0f0a1007fae07805
- MD5 246e58f9efd0dc6eeca2007d4be59783
- SHA1 dde87c20511eacb0bcd4e824855c1f205764329c
- SHA512 e559bedc30fe205f0e7b5a33a6ee14972b56504b0f1687d70e7f87859022408a7a8c66f64f450522cb11ab9cb0811b6df783d6741fcbb2947986addeaf6cd8f0
- SSDEEP 6144:fb6ms+flT/KFO/70Desg0wGEFaVQUaQtkhhwvKUA6S2wSbGN:fGms41CIT09g0wGE6Khhwva6Ze
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy