agenttesla | c1bb87d175c0bd11d05b38e15985c040b3c5ff6c64b7d6947784dfd1fb1106e1 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

c1bb87d175...e1.exe

windows7-x64

c1bb87d175...e1.exe

windows10-2004-x64

Sharing

General

Target

c1bb87d175c0bd11d05b38e15985c040b3c5ff6c64b7d6947784dfd1fb1106e1
Size

316KB
Sample

230823-kahxjacc4z
MD5

3f01be77d073cc37a6e36068761230fb
SHA1

97be433de500f3ea20441a38e1e096ec325bd435
SHA256

c1bb87d175c0bd11d05b38e15985c040b3c5ff6c64b7d6947784dfd1fb1106e1
SHA512

5921e7300159162f849277c75535233635ed60035cd0e61de82f4cda2e0cbe480fa3745eb748496ace7fb042670598b90c0314cca7b034dc5d855cee0ed06ac8
SSDEEP

6144:8HLqbN7tQW9oMwTiDzEdnV0olftr0wYjsXMVikV45l:pQlpTY4dfllDYjsXgk3

Score

10^/10

agenttesla keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

c1bb87d175c0bd11d05b38e15985c040b3c5ff6c64b7d6947784dfd1fb1106e1.exe

Resource

win7-20230712-en

agenttesla keylogger spyware stealer trojan

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

c1bb87d175c0bd11d05b38e15985c040b3c5ff6c64b7d6947784dfd1fb1106e1.exe

Resource

win10v2004-20230703-en

agenttesla keylogger spyware stealer trojan

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
smtp.rapltorsupplies.com
Port:
587
Username:
[email protected]
Password:
JG%xlMm6
Email To:
[email protected]

Targets

- Target
  
  c1bb87d175c0bd11d05b38e15985c040b3c5ff6c64b7d6947784dfd1fb1106e1
- Size
  
  316KB
- MD5
  
  3f01be77d073cc37a6e36068761230fb
- SHA1
  
  97be433de500f3ea20441a38e1e096ec325bd435
- SHA256
  
  c1bb87d175c0bd11d05b38e15985c040b3c5ff6c64b7d6947784dfd1fb1106e1
- SHA512
  
  5921e7300159162f849277c75535233635ed60035cd0e61de82f4cda2e0cbe480fa3745eb748496ace7fb042670598b90c0314cca7b034dc5d855cee0ed06ac8
- SSDEEP
  
  6144:8HLqbN7tQW9oMwTiDzEdnV0olftr0wYjsXMVikV45l:pQlpTY4dfllDYjsXgk3
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan

© 2018-2025

Terms | Privacy