agenttesla | 54997c9767d784fc3d566238940f84541c4b614ec794aceeb84d2bb8a4104bf5 | Triage

Submit
Reports

Overview

overview

Static

static

3

6fa33275b4...c9.exe

windows7-x64

6fa33275b4...c9.exe

windows10-2004-x64

Sharing

General

Target

6fa33275b4f3de73faabdd5dc084f0c9
Size

1.1MB
Sample

231226-p1mevsedg6
MD5

6fa33275b4f3de73faabdd5dc084f0c9
SHA1

8b624a452820e2949eec05c2e16c6cb0cd685c12
SHA256

54997c9767d784fc3d566238940f84541c4b614ec794aceeb84d2bb8a4104bf5
SHA512

3854b0e82dae57b39d4cdbe4f82b044b08c618975878f68e2371e8de7df20c274a67187d1b02b1fcfe0153a195e6884bdba1bd23f55a0f315fe6823bb68cccbf
SSDEEP

12288:rKEvPYypPP2JNU20O6iJ+K8/8qkiFhG7SYLRWhwB3H3I/swqHpB9hDsC07tHNHVl:eU2GisKophkbLR5B33VLHDfDJIx+ED

Score

10^/10

agenttesla keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

6fa33275b4f3de73faabdd5dc084f0c9.exe

Resource

win7-20231215-en

agenttesla keylogger spyware stealer trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

6fa33275b4f3de73faabdd5dc084f0c9.exe

Resource

win10v2004-20231222-en

agenttesla keylogger spyware stealer trojan

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.tejoofashions.com
Port:
587
Username:
[email protected]
Password:
OmiCron#2019

Targets

- Target
  
  6fa33275b4f3de73faabdd5dc084f0c9
- Size
  
  1.1MB
- MD5
  
  6fa33275b4f3de73faabdd5dc084f0c9
- SHA1
  
  8b624a452820e2949eec05c2e16c6cb0cd685c12
- SHA256
  
  54997c9767d784fc3d566238940f84541c4b614ec794aceeb84d2bb8a4104bf5
- SHA512
  
  3854b0e82dae57b39d4cdbe4f82b044b08c618975878f68e2371e8de7df20c274a67187d1b02b1fcfe0153a195e6884bdba1bd23f55a0f315fe6823bb68cccbf
- SSDEEP
  
  12288:rKEvPYypPP2JNU20O6iJ+K8/8qkiFhG7SYLRWhwB3H3I/swqHpB9hDsC07tHNHVl:eU2GisKophkbLR5B33VLHDfDJIx+ED
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Scheduled Task/Job

Privilege Escalation

Scheduled Task/Job

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan

© 2018-2025

Terms | Privacy