agenttesla | fb306fbcb97613c5f71e7e2ba7787dbc12734cd722c54518c48cd216d1a01b17 | Triage™

Login
Reports

Overview

overview

Static

static

3

R F Q.exe

windows7-x64

R F Q.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
R F Q.exe
Size 666KB
Sample230524-m6tp1scg31
SHA256 fb306fbcb97613c5f71e7e2ba7787dbc12734cd722c54518c48cd216d1a01b17
MD5 584cda82ad7a50ced635191c21323794
SHA1 bf326e1f63ea0ca27ec757eb8dead944ac2501ce
SHA512 3be6cf675354d3f8ac47efa132d4fdbb7bf5da305b17ce573d863efa3df05651de0b86b05c752ccf057dc689eda857756844a4a7697c9735fd4d0efcb805cf33
SSDEEP 12288:Hi9iTB2QwN/oMVf7HvIEt0IIjuywwQRAHjAA:Fu7PV0I9yAA
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

R F Q.exe

Resource

win7-20230220-en

windows7-x64

8 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

R F Q.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

8 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.garagerobert.be
Port
587
Username
[email protected]
Password
dibi7779
Email to
[email protected]

Targets

- Target
  R F Q.exe
- Size 666KB
- SHA256 fb306fbcb97613c5f71e7e2ba7787dbc12734cd722c54518c48cd216d1a01b17
- MD5 584cda82ad7a50ced635191c21323794
- SHA1 bf326e1f63ea0ca27ec757eb8dead944ac2501ce
- SHA512 3be6cf675354d3f8ac47efa132d4fdbb7bf5da305b17ce573d863efa3df05651de0b86b05c752ccf057dc689eda857756844a4a7697c9735fd4d0efcb805cf33
- SSDEEP 12288:Hi9iTB2QwN/oMVf7HvIEt0IIjuywwQRAHjAA:Fu7PV0I9yAA
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy