agenttesla | f2cdc7624763bd6da7d62e0ff26367b3fd1d79e8f355e45110827d4b3f85e962 | Triage™

Login
Reports

Overview

overview

Static

static

1

30307_2307...56.exe

windows7-x64

1

30307_2307...56.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
30307_230707_odeme talimat_453747683648987643456.exe
Size 913KB
Sample230708-kep7eaeb51
SHA256 f2cdc7624763bd6da7d62e0ff26367b3fd1d79e8f355e45110827d4b3f85e962
MD5 8d6b3162c1960435fe457b8f9ea61e38
SHA1 b62042ac75d96d6c4c13f108766a0551ef146269
SHA512 5d8799efdc2e059baeca01731dbeb7bab224ac482b73a26de39d1cfce83c0ec46892e4cd61f75e68122496c8b3fc5c0f99bdc9ccce784e5e5e327ef8f13ca0ae
SSDEEP 24576:jk70TrcN4z+w5uT6R+MP71LsJQgAfGHBYtJ8d9OSZTD9p7M:jkQTAKyw5uT6IQLsJQg9ObqT56
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

30307_230707_odeme talimat_453747683648987643456.exe

Resource

win7-20230703-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

30307_230707_odeme talimat_453747683648987643456.exe

Resource

win10v2004-20230703-en

windows10-2004-x64

9 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1084897732159877190/Sq3vdkYR5uVXaEyCWUN3aeAALKNkyZDHJm96_dMq10NdxhD5qjWPcgViVJaSr4GRq80z

Targets

- Target
  30307_230707_odeme talimat_453747683648987643456.exe
- Size 913KB
- SHA256 f2cdc7624763bd6da7d62e0ff26367b3fd1d79e8f355e45110827d4b3f85e962
- MD5 8d6b3162c1960435fe457b8f9ea61e38
- SHA1 b62042ac75d96d6c4c13f108766a0551ef146269
- SHA512 5d8799efdc2e059baeca01731dbeb7bab224ac482b73a26de39d1cfce83c0ec46892e4cd61f75e68122496c8b3fc5c0f99bdc9ccce784e5e5e327ef8f13ca0ae
- SSDEEP 24576:jk70TrcN4z+w5uT6R+MP71LsJQgAfGHBYtJ8d9OSZTD9p7M:jkQTAKyw5uT6IQLsJQg9ObqT56
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy