agenttesla | b63c7c8967a492c0c2a30d0b0d4694cfa693b1a1b6db3d7498d4d526889ecc44 | Triage

Submit
Reports

Overview

overview

Static

static

b63c7c8967...44.exe

windows7-x64

b63c7c8967...44.exe

windows10-2004-x64

Sharing

General

Target

b63c7c8967a492c0c2a30d0b0d4694cfa693b1a1b6db3d7498d4d526889ecc44.exe
Size

416KB
Sample

231202-llx19sbe59
MD5

cc6f4d2f70c0b2e78b3a3a2ac85d6558
SHA1

884533d77211f566b0dd3d6b941f95601a1c0665
SHA256

b63c7c8967a492c0c2a30d0b0d4694cfa693b1a1b6db3d7498d4d526889ecc44
SHA512

58059398e8cf7982c87325f2ea0a54cbc3505dd2c203f757fe3c8315e89e84a9e5cfddc9452ab6ed660d9a4852f055effbd9b2d8394892329ac8f8bb41c00076
SSDEEP

6144:gecVmg0JrRy93uhVr2qIfWY3Sksh3z/5:oVCRZCJWARIj5

Score

10^/10

agenttesla purelogs collection keylogger spyware stealer trojan

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

b63c7c8967a492c0c2a30d0b0d4694cfa693b1a1b6db3d7498d4d526889ecc44.exe

Resource

win7-20231130-en

purelogs stealer

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

b63c7c8967a492c0c2a30d0b0d4694cfa693b1a1b6db3d7498d4d526889ecc44.exe

Resource

win10v2004-20231127-en

agenttesla purelogs collection keylogger spyware stealer trojan

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
smtp.rapltorsupplies.com
Port:
587
Username:
[email protected]
Password:
JG%xlMm6
Email To:
[email protected]

Targets

- Target
  
  b63c7c8967a492c0c2a30d0b0d4694cfa693b1a1b6db3d7498d4d526889ecc44.exe
- Size
  
  416KB
- MD5
  
  cc6f4d2f70c0b2e78b3a3a2ac85d6558
- SHA1
  
  884533d77211f566b0dd3d6b941f95601a1c0665
- SHA256
  
  b63c7c8967a492c0c2a30d0b0d4694cfa693b1a1b6db3d7498d4d526889ecc44
- SHA512
  
  58059398e8cf7982c87325f2ea0a54cbc3505dd2c203f757fe3c8315e89e84a9e5cfddc9452ab6ed660d9a4852f055effbd9b2d8394892329ac8f8bb41c00076
- SSDEEP
  
  6144:gecVmg0JrRy93uhVr2qIfWY3Sksh3z/5:oVCRZCJWARIj5
Score

10^/10

purelogs stealer agenttesla collection keylogger spyware trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Detect PureLogs payload
- PureLogs
  PureLogs is an infostealer written in C#.
  stealer purelogs
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

purelogsstealer

behavioral2

agentteslapurelogscollectionkeyloggerspywarestealertrojan

© 2018-2025

Terms | Privacy