agenttesla | e3feb12dcf485ad048597906bec1860a6e06bc117fd83786d07423d142bce8e3 | Triage

Submit
Reports

Overview

overview

Static

static

3

e3feb12dcf...e3.exe

windows7-x64

1

e3feb12dcf...e3.exe

windows10-2004-x64

Sharing

General

Target

e3feb12dcf485ad048597906bec1860a6e06bc117fd83786d07423d142bce8e3
Size

992KB
Sample

240425-bs9njacg96
MD5

3b20ec9ea1d0d5723894f6f294a3a4e7
SHA1

dad2c7919b92bf89fa5031019db4e6b99c1ca1f5
SHA256

e3feb12dcf485ad048597906bec1860a6e06bc117fd83786d07423d142bce8e3
SHA512

ce450040021723afaf4c0a0356611123d3673ec6ea09e53b0e09b1c6a9b83f4e3f2ead404da701bb638031379657230028f552368eeca7145a83e1fd2f9d3cc2
SSDEEP

24576:80QxxaC8OeT29IhZ2Yj9IkcX8Y8Hqm3YcDCLaMjK3K7:8wC8HT2902YRIkm8YmYmfpK7

Score

10^/10

agenttesla keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

e3feb12dcf485ad048597906bec1860a6e06bc117fd83786d07423d142bce8e3.exe

Resource

win7-20240221-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

e3feb12dcf485ad048597906bec1860a6e06bc117fd83786d07423d142bce8e3.exe

Resource

win10v2004-20240412-en

agenttesla keylogger spyware stealer trojan

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6829945031:AAEyys9fnk7e8MAzVp2oaMaeJ17CeV3jW00/

Targets

- Target
  
  e3feb12dcf485ad048597906bec1860a6e06bc117fd83786d07423d142bce8e3
- Size
  
  992KB
- MD5
  
  3b20ec9ea1d0d5723894f6f294a3a4e7
- SHA1
  
  dad2c7919b92bf89fa5031019db4e6b99c1ca1f5
- SHA256
  
  e3feb12dcf485ad048597906bec1860a6e06bc117fd83786d07423d142bce8e3
- SHA512
  
  ce450040021723afaf4c0a0356611123d3673ec6ea09e53b0e09b1c6a9b83f4e3f2ead404da701bb638031379657230028f552368eeca7145a83e1fd2f9d3cc2
- SSDEEP
  
  24576:80QxxaC8OeT29IhZ2Yj9IkcX8Y8Hqm3YcDCLaMjK3K7:8wC8HT2902YRIkm8YmYmfpK7
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

agentteslakeyloggerspywarestealertrojan

© 2018-2024

Terms | Privacy