agenttesla | 33579d62e29087f5f0948d5c209858ba6f811f809e39424d6776d6a2b8131e2d | Triage

Submit
Reports

Overview

overview

Static

static

33579d62e2...2d.exe

windows7-x64

33579d62e2...2d.exe

windows10-2004-x64

Sharing

General

Target

33579d62e29087f5f0948d5c209858ba6f811f809e39424d6776d6a2b8131e2d
Size

154.0MB
Sample

231206-c482taad59
MD5

652219e3762bac4398d5d0d72d53dc9b
SHA1

c6e5a82be097208b154b2078b5b1fb1028c75ec2
SHA256

33579d62e29087f5f0948d5c209858ba6f811f809e39424d6776d6a2b8131e2d
SHA512

748d104e30451122d1284445be19867b55656dc05bf666ec82e8d88f03c803690350cf5f696e0762822393e871d17dac5e4ad86e426ed36038af8964b7a62e8f
SSDEEP

1572864:UafzGToO0fw1GZrhqWKnUlqdoT43pv8Mx58REy0DZlecD:HfzdhbIoTY5jZAq

Score

10^/10

agenttesla keylogger spyware stealer trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

33579d62e29087f5f0948d5c209858ba6f811f809e39424d6776d6a2b8131e2d.exe

Resource

win7-20231025-en

agenttesla keylogger spyware stealer trojan

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

33579d62e29087f5f0948d5c209858ba6f811f809e39424d6776d6a2b8131e2d.exe

Resource

win10v2004-20231127-en

agenttesla keylogger spyware stealer trojan

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  33579d62e29087f5f0948d5c209858ba6f811f809e39424d6776d6a2b8131e2d
- Size
  
  154.0MB
- MD5
  
  652219e3762bac4398d5d0d72d53dc9b
- SHA1
  
  c6e5a82be097208b154b2078b5b1fb1028c75ec2
- SHA256
  
  33579d62e29087f5f0948d5c209858ba6f811f809e39424d6776d6a2b8131e2d
- SHA512
  
  748d104e30451122d1284445be19867b55656dc05bf666ec82e8d88f03c803690350cf5f696e0762822393e871d17dac5e4ad86e426ed36038af8964b7a62e8f
- SSDEEP
  
  1572864:UafzGToO0fw1GZrhqWKnUlqdoT43pv8Mx58REy0DZlecD:HfzdhbIoTY5jZAq
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan

© 2018-2024

Terms | Privacy