agenttesla | df93f9ce611ac7eaeec6d5eb825051fc46def0644bc78e70f317e852f01655d7 | Triage™

Login
Reports

Overview

overview

Static

static

3

Order No. ...52.exe

windows7-x64

Order No. ...52.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
Order No. I20220052.exe
Size 861KB
Sample230516-sra71sbd42
SHA256 df93f9ce611ac7eaeec6d5eb825051fc46def0644bc78e70f317e852f01655d7
MD5 3178d5fdc2c4d5d40d1347982415f650
SHA1 c9b688fae2b4ebbf195f7d73a1a89423c099ea5d
SHA512 67f25c5869ff605ebe47f1b44334d31f3311cb0e86ad9e9fe3930187f562da1e092ab037e2e52c38be7497384259f46b996db0405af6992ab2637f5247e77822
SSDEEP 6144:RHRrajp5MTGSadCYtS4N5I/jSqyCEnRdF5RzWT1+EId81jxtEUKJJOCpx1sAQ7bx:RHRrxGDSljSVHf64d8pxtUV1sAUwIiU
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Order No. I20220052.exe

Resource

win7-20230220-en

windows7-x64

8 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

Order No. I20220052.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

8 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.garagerobert.be
Port
587
Username
[email protected]
Password
dibi7779
Email to
[email protected]

Targets

- Target
  Order No. I20220052.exe
- Size 861KB
- SHA256 df93f9ce611ac7eaeec6d5eb825051fc46def0644bc78e70f317e852f01655d7
- MD5 3178d5fdc2c4d5d40d1347982415f650
- SHA1 c9b688fae2b4ebbf195f7d73a1a89423c099ea5d
- SHA512 67f25c5869ff605ebe47f1b44334d31f3311cb0e86ad9e9fe3930187f562da1e092ab037e2e52c38be7497384259f46b996db0405af6992ab2637f5247e77822
- SSDEEP 6144:RHRrajp5MTGSadCYtS4N5I/jSqyCEnRdF5RzWT1+EId81jxtEUKJJOCpx1sAQ7bx:RHRrxGDSljSVHf64d8pxtUV1sAUwIiU
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy