agenttesla | e66ba99955c1baa592951ea963c209ebfa962ee480470ee7c4b7ffd0794303c4 | Triage

Submit
Reports

Overview

overview

Static

static

5

e66ba99955...c4.exe

windows7-x64

e66ba99955...c4.exe

windows10-2004-x64

3

Sharing

General

Target

e66ba99955c1baa592951ea963c209ebfa962ee480470ee7c4b7ffd0794303c4
Size

1.0MB
Sample

240430-bkwfyafh53
MD5

5cb38ade848eb20ddef9c80c365b50bc
SHA1

50fc810ed7e55a9d056a0ea44bcbdcf3859ee13a
SHA256

e66ba99955c1baa592951ea963c209ebfa962ee480470ee7c4b7ffd0794303c4
SHA512

2021d6b0b0f6fe0a63f1bb838c216632334e105e898792cb26181c189765b6edac70ab285873b31b35fd4f8f711682262e813e9b4f9ceded6c1dbc43add1ebc2
SSDEEP

24576:3AHnh+eWsN3skA4RV1Hom2KXMmHawrHtmqVj95:qh+ZkldoPK8Yawhmw

Score

10^/10

agenttesla keylogger spyware stealer trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

e66ba99955c1baa592951ea963c209ebfa962ee480470ee7c4b7ffd0794303c4.exe

Resource

win7-20240221-en

agenttesla keylogger spyware stealer trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

e66ba99955c1baa592951ea963c209ebfa962ee480470ee7c4b7ffd0794303c4.exe

Resource

win10v2004-20240419-en

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.bezelety.top
Port:
587
Username:
[email protected]
Password:
KV?y1$dqdUzV
Email To:
[email protected]

Targets

- Target
  
  e66ba99955c1baa592951ea963c209ebfa962ee480470ee7c4b7ffd0794303c4
- Size
  
  1.0MB
- MD5
  
  5cb38ade848eb20ddef9c80c365b50bc
- SHA1
  
  50fc810ed7e55a9d056a0ea44bcbdcf3859ee13a
- SHA256
  
  e66ba99955c1baa592951ea963c209ebfa962ee480470ee7c4b7ffd0794303c4
- SHA512
  
  2021d6b0b0f6fe0a63f1bb838c216632334e105e898792cb26181c189765b6edac70ab285873b31b35fd4f8f711682262e813e9b4f9ceded6c1dbc43add1ebc2
- SSDEEP
  
  24576:3AHnh+eWsN3skA4RV1Hom2KXMmHawrHtmqVj95:qh+ZkldoPK8Yawhmw
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

© 2018-2024

Terms | Privacy