agenttesla | a62d9307bbcf6c6a1da2a346c9c53a1354d6678d960d2641469ddf2e8fe3c758 | Triage™

Login
Reports

Overview

overview

Static

static

3

SHIPPING DOC.exe

windows7-x64

SHIPPING DOC.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
SHIPPING DOC.exe
Size 696KB
Sample230522-q2dpsabe6z
SHA256 a62d9307bbcf6c6a1da2a346c9c53a1354d6678d960d2641469ddf2e8fe3c758
MD5 f5e079e4631b933e659d2f09d19693cc
SHA1 ef6546b1a69589914547dff90946b78058bfab7a
SHA512 118b897b7bb0b24d4149c519d6a6a15d43610000bf7b231b6415f6fc42203a83285cd60b0f3f10b7e792631c029c891cb6e1bcb4a5d3a232e97d5e1e624d55e9
SSDEEP 12288:DZhfr2FFcntilDPpZ2LomiwgNqSmc1pBWMm:DyDxPpsL+Nqh6M
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

SHIPPING DOC.exe

Resource

win7-20230220-en

windows7-x64

7 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

SHIPPING DOC.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

8 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
sarahfoils.com
Port
587
Username
[email protected]
Password
Scalatica01
Email to
[email protected]

Targets

- Target
  SHIPPING DOC.exe
- Size 696KB
- SHA256 a62d9307bbcf6c6a1da2a346c9c53a1354d6678d960d2641469ddf2e8fe3c758
- MD5 f5e079e4631b933e659d2f09d19693cc
- SHA1 ef6546b1a69589914547dff90946b78058bfab7a
- SHA512 118b897b7bb0b24d4149c519d6a6a15d43610000bf7b231b6415f6fc42203a83285cd60b0f3f10b7e792631c029c891cb6e1bcb4a5d3a232e97d5e1e624d55e9
- SSDEEP 12288:DZhfr2FFcntilDPpZ2LomiwgNqSmc1pBWMm:DyDxPpsL+Nqh6M
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy