agenttesla | e584673e42523aca0fcbd1f9a25758b75ade4279fa07bd0676bc020a4c08a89f | Triage™

Login
Reports

Overview

overview

Static

static

3

SOA.exe

windows7-x64

SOA.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
SOA.r15.rar
Size 441KB
Sample230614-lkbrmsfe45
SHA256 e584673e42523aca0fcbd1f9a25758b75ade4279fa07bd0676bc020a4c08a89f
MD5 e0e2a6129f5ac408a4dbf6c14a204eae
SHA1 81d766586f60cb81044efcdf13c8aa923f5bd3ca
SHA512 d7f572bbeedbe5ec7ecc2e9c053d6c6f2426e7d5b78a2071a0baf90ef413f5df2f9e6d93cb7ea3e279afc02a9d9ae017fbeb35dfe0d30f74c82658b3600fdb74
SSDEEP 6144:qSuBK8y7e0GltNzKS81SeFlai3o6bmq4Nnhq/EcgjG02ctnmT2XA6fnw:kR/tN2n1Ui46bIhhqs1KynmoRfw
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

SOA.exe

Resource

win7-20230220-en

windows7-x64

8 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

SOA.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

8 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.exceltruea.com
Port
587
Username
[email protected]
Password
bl es si ng 2 0 2 3
Email to
[email protected]

Targets

- Target
  SOA.exe
- Size 787KB
- SHA256 7f4eaccd05489039f57a3d4258721fd636ce8ec8104c2184d366af9a75498e8e
- MD5 7c34e879f19cda6ddce16d1468298e4a
- SHA1 4d2793ce804d1b0784d607f46890425cc54688fa
- SHA512 df0f8d17daa27ba150584ff32dd122033aa3c0cbcfca2189ec1414c62610d47b0b8a2b56a3b104257603aad7cdc8cc159846adfe83f109132c8643713cbe7ce7
- SSDEEP 12288:xQwTr3+sMJBGRKe7q6gHtSBV0+LygkDAAdfY:9mfGRfq7YBVByg5A
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy