agenttesla | 8452659f0aed8f73bfa2a5010f7ed6c76bab50b695ee4aec97c0e1e275ae0ab3 | Triage™

Login
Reports

Overview

overview

Static

static

3

FIYAT TALE...07.exe

windows7-x64

FIYAT TALE...07.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
FIYAT TALEBI N°DE2809 ACIL LUTFEN 230907.exe
Size 227KB
Sample230907-tp87psbe93
SHA256 8452659f0aed8f73bfa2a5010f7ed6c76bab50b695ee4aec97c0e1e275ae0ab3
MD5 5e9beef695b147d5d97c046816ea05f6
SHA1 3a31e3d58b1d795b6856c5d99efac31d6e449b29
SHA512 ed87797939d56550630ed1ffae183ca007aa49b8865d075784eae7a6514b60d836e2260e317444b010d04fae4365a057614ddeaec21a257b3e233ec73e183c89
SSDEEP 3072:Fft8fPl67SQzNMbu3zbxSY7KZnS/KzJBLY:FfOl67SQzNMbu3zbL7qS/a
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

FIYAT TALEBI N°DE2809 ACIL LUTFEN 230907.exe

Resource

win7-20230831-en

windows7-x64

10 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

FIYAT TALEBI N°DE2809 ACIL LUTFEN 230907.exe

Resource

win10v2004-20230831-en

windows10-2004-x64

9 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Credentials

Protocol
smtp
Host
mail.totallyanonymous.com
Port
587
Username
[email protected]
Password
156w702T

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.totallyanonymous.com
Port
587
Username
[email protected]
Password
156w702T
Email to
[email protected]

Targets

- Target
  FIYAT TALEBI N°DE2809 ACIL LUTFEN 230907.exe
- Size 227KB
- SHA256 8452659f0aed8f73bfa2a5010f7ed6c76bab50b695ee4aec97c0e1e275ae0ab3
- MD5 5e9beef695b147d5d97c046816ea05f6
- SHA1 3a31e3d58b1d795b6856c5d99efac31d6e449b29
- SHA512 ed87797939d56550630ed1ffae183ca007aa49b8865d075784eae7a6514b60d836e2260e317444b010d04fae4365a057614ddeaec21a257b3e233ec73e183c89
- SSDEEP 3072:Fft8fPl67SQzNMbu3zbxSY7KZnS/KzJBLY:FfOl67SQzNMbu3zbL7qS/a
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy