agenttesla | ee87b91b6480592bf45354a624ef6b478ed812f5ef33e36dbb6775fe057dbcfa | Triage™

Login
Reports

Overview

overview

Static

static

3

SecuriteIn...89.exe

windows7-x64

SecuriteIn...89.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
SecuriteInfo.com.Win32.PWSX-gen.564.11389.exe
Size 714KB
Sample231115-ewc1hsdc5t
SHA256 ee87b91b6480592bf45354a624ef6b478ed812f5ef33e36dbb6775fe057dbcfa
MD5 e073694e356a34ebc0f0e17890e01cb9
SHA1 1fa138be9ebeb0ebc0f08820282c3b6dbfb54a08
SHA512 ab968f0ca6e29ee65668ae09d12476cfcbbd6e1e1d0ea36b4d5e8b28466bfca127b1e636b02ce9a7794c4a737b631bfa36c58be74a303a9f9da1ebdfc157d0e7
SSDEEP 12288:NxQDSIa+53vsMjZoAC0y7G5nzFLQXT7gPDdfTod:fSkMjZ20J9JJ
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

SecuriteInfo.com.Win32.PWSX-gen.564.11389.exe

Resource

win7-20231023-en

windows7-x64

8 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

SecuriteInfo.com.Win32.PWSX-gen.564.11389.exe

Resource

win10v2004-20231023-en

windows10-2004-x64

7 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
us2.smtp.mailhostbox.com
Port
587
Username
[email protected]
Password
JUGCRsm9
Email to
[email protected]

Targets

- Target
  SecuriteInfo.com.Win32.PWSX-gen.564.11389.exe
- Size 714KB
- SHA256 ee87b91b6480592bf45354a624ef6b478ed812f5ef33e36dbb6775fe057dbcfa
- MD5 e073694e356a34ebc0f0e17890e01cb9
- SHA1 1fa138be9ebeb0ebc0f08820282c3b6dbfb54a08
- SHA512 ab968f0ca6e29ee65668ae09d12476cfcbbd6e1e1d0ea36b4d5e8b28466bfca127b1e636b02ce9a7794c4a737b631bfa36c58be74a303a9f9da1ebdfc157d0e7
- SSDEEP 12288:NxQDSIa+53vsMjZoAC0y7G5nzFLQXT7gPDdfTod:fSkMjZ20J9JJ
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy