agenttesla | 754a93d8bd8a0ad6d585bbf804be6b2f8575796ac3508aba7c63b051bec6addb | Triage™

Login
Reports

Overview

overview

Static

static

3

SOA FREIGHT SLIP.exe

windows7-x64

SOA FREIGHT SLIP.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
SOA FREIGHT SLIP.zip
Size 520KB
Sample230627-wr2azsfa69
SHA256 754a93d8bd8a0ad6d585bbf804be6b2f8575796ac3508aba7c63b051bec6addb
MD5 d8a1382a6ba6b919e6fe47bd493bdf21
SHA1 ee6878fe401780082e530bfc1146e6e92637367e
SHA512 7178a736ba242c24052688b612f0cb9806d79555fc155a64a538a092a34a59c7cdafc9158d1fc3bccac49a0b2f72766ef4a6c7c3c45555907095ef861a5b41cd
SSDEEP 12288:GiX0euZkiMlhE3QMAPT8IiVW6RLI0qHjyAiesw9:GiEe4OkAMAPT+VD6HjyAnsE
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

SOA FREIGHT SLIP.exe

Resource

win7-20230621-en

windows7-x64

7 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

SOA FREIGHT SLIP.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

7 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.expertsconsultgh.co
Port
587
Username
[email protected]
Password
Oppong.2012
Email to
[email protected]

Targets

- Target
  SOA FREIGHT SLIP.exe
- Size 584KB
- SHA256 0b4d7a81cb8f89e34562cd756540d3dd62176c0fa829d7dba9db2c727b92aef0
- MD5 ba7bda1cdae0c9fb1d2ab26c20a7ecdf
- SHA1 9aea55f1b50787ab704f408146eb076973804ba8
- SHA512 692339704b9363deb0f01eb9f1b1fb706bb6d582178999771121bc6f5ce2ec79d8bea8aa19217712aa771eb0530dafcfb5c3a3bdcc6684499a3791443ca85067
- SSDEEP 12288:7b/DTqFh03+MA+MIhvKCTagRVuiOHjnIsz+IbLM4Pyw0lpDRNcD8:TG0OMAm/TJaHjIoU
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy