agenttesla | 36ad46bb2f32753b712405eebaebd3d70728db89e20e7dd2e73cc6e82a64237c | Triage™

Login
Reports

Overview

overview

Static

static

3

RFQ for Req 12465.exe

windows7-x64

RFQ for Req 12465.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
RFQ for Req 12465.exe
Size 825KB
Sample230629-pg6pdsdg71
SHA256 36ad46bb2f32753b712405eebaebd3d70728db89e20e7dd2e73cc6e82a64237c
MD5 67441d5c2576beed1b3119791c1cd6d0
SHA1 cd09033d19cc777861f7fb7412a838f8d812c51c
SHA512 606971e8a6ea0266f652c91968038c57de93d694cd7c9bab5b68033c7f6097d65db7de05570fba0fe6cc9c072cfff295980be835bb7a29318abccdccfc9c5872
SSDEEP 12288:Gmx4qHZRCBJB0FfHVmXbLVFV+u410emz99hg7KSGah6I9dCXW4LDRvNpuK66wjOu:GmBZRiO5HVmXnVK0e8Mp
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

RFQ for Req 12465.exe

Resource

win7-20230621-en

windows7-x64

7 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

RFQ for Req 12465.exe

Resource

win10v2004-20230621-en

windows10-2004-x64

7 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.strictfacilityservices.com
Port
587
Username
[email protected]
Password
SFS!@#321
Email to
[email protected]

Targets

- Target
  RFQ for Req 12465.exe
- Size 825KB
- SHA256 36ad46bb2f32753b712405eebaebd3d70728db89e20e7dd2e73cc6e82a64237c
- MD5 67441d5c2576beed1b3119791c1cd6d0
- SHA1 cd09033d19cc777861f7fb7412a838f8d812c51c
- SHA512 606971e8a6ea0266f652c91968038c57de93d694cd7c9bab5b68033c7f6097d65db7de05570fba0fe6cc9c072cfff295980be835bb7a29318abccdccfc9c5872
- SSDEEP 12288:Gmx4qHZRCBJB0FfHVmXbLVFV+u410emz99hg7KSGah6I9dCXW4LDRvNpuK66wjOu:GmBZRiO5HVmXnVK0e8Mp
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy