agenttesla | 78b2c60dab71f835b8163d190c0befd4daf3ef2d574f2dd717a52feb82d497b2 | Triage™

Login
Reports

Overview

overview

Static

static

3

SO GOSUSN...60.exe

windows7-x64

SO GOSUSN...60.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
SO GOSUSNH1637860.exe
Size 974KB
Sample230512-n6a4cada32
SHA256 78b2c60dab71f835b8163d190c0befd4daf3ef2d574f2dd717a52feb82d497b2
MD5 4f063a5b00bc46c1fde799cf7b2e20aa
SHA1 d9969d705a8b88d6d84db28a055eb9900c21b0d1
SHA512 781e75bd6cfb3c26be9c9391dad79477f007b55fe32d1d5cff0fb4d5a0ee61490315070301a490d6e3390997e90f72c6d35633fec47fb813a5876881f1f72bc9
SSDEEP 12288:AjjE2iNEc1MVowSws0mh2qgEaUEiKDyNfx7XsAg6kpjZ:6E1+ciVowS8mcqgyOyNd3gn
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

SO GOSUSNH1637860.exe

Resource

win7-20230220-en

windows7-x64

7 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

SO GOSUSNH1637860.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

8 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
sarahfoils.com
Port
587
Username
[email protected]
Password
Scalatica01
Email to
[email protected]

Targets

- Target
  SO GOSUSNH1637860.exe
- Size 974KB
- SHA256 78b2c60dab71f835b8163d190c0befd4daf3ef2d574f2dd717a52feb82d497b2
- MD5 4f063a5b00bc46c1fde799cf7b2e20aa
- SHA1 d9969d705a8b88d6d84db28a055eb9900c21b0d1
- SHA512 781e75bd6cfb3c26be9c9391dad79477f007b55fe32d1d5cff0fb4d5a0ee61490315070301a490d6e3390997e90f72c6d35633fec47fb813a5876881f1f72bc9
- SSDEEP 12288:AjjE2iNEc1MVowSws0mh2qgEaUEiKDyNfx7XsAg6kpjZ:6E1+ciVowS8mcqgyOyNd3gn
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy