agenttesla | d69af24cb696c4e9de1910acdbced3b8f912e61591c0308a8de7fd798b86ecea | Triage™

Login
Reports

Overview

overview

Static

static

5

6bb6023d67...e2.exe

windows7-x64

6bb6023d67...e2.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
6bb6023d672f8817aebd54a3e54c82e2.exe
Size 1020KB
Sample240217-e2hsysbd29
SHA256 d69af24cb696c4e9de1910acdbced3b8f912e61591c0308a8de7fd798b86ecea
MD5 6bb6023d672f8817aebd54a3e54c82e2
SHA1 8060d4863cefd3ad6334c20b7230b739a2038db0
SHA512 ab8e173ea35254ae2fd82778639517d60765f241b1c6e2c89efec9e44369f7677ab9347d54ea79e33e2f48ab819b17a38b340817131e1d916ec1c4d9ffabefec
SSDEEP 12288:IhkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcE4az6ooSVYQxRS4XqJcFSEaF:wRmJkcoQricOIQxiZY1iazbUQxUJJuC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla keylogger spyware stealer trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

6bb6023d672f8817aebd54a3e54c82e2.exe

Resource

win7-20240215-en

windows7-x64

7 signatures

150 seconds

agenttesla keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

6bb6023d672f8817aebd54a3e54c82e2.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

7 signatures

150 seconds

agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.worlorderbillions.top
Port
587
Username
[email protected]
Password
~lhTqZ3?QKP@
Email to
[email protected]

Targets

- Target
  6bb6023d672f8817aebd54a3e54c82e2.exe
- Size 1020KB
- SHA256 d69af24cb696c4e9de1910acdbced3b8f912e61591c0308a8de7fd798b86ecea
- MD5 6bb6023d672f8817aebd54a3e54c82e2
- SHA1 8060d4863cefd3ad6334c20b7230b739a2038db0
- SHA512 ab8e173ea35254ae2fd82778639517d60765f241b1c6e2c89efec9e44369f7677ab9347d54ea79e33e2f48ab819b17a38b340817131e1d916ec1c4d9ffabefec
- SSDEEP 12288:IhkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcE4az6ooSVYQxRS4XqJcFSEaF:wRmJkcoQricOIQxiZY1iazbUQxUJJuC
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy