agenttesla | 91b69e17e757c1c3acc55009d0673944d53af7a14cbbd731794f7bbcd67870c1 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

91b69e17e7...c1.exe

windows7-x64

91b69e17e7...c1.exe

windows10-2004-x64

Sharing

General

Target

91b69e17e757c1c3acc55009d0673944d53af7a14cbbd731794f7bbcd67870c1
Size

705KB
Sample

240514-bxrnhsdg4x
MD5

d71c9662d3bd3f64f680bc63bd99a2db
SHA1

f4eb202735a10ec4fe221f20d6c9930e97950322
SHA256

91b69e17e757c1c3acc55009d0673944d53af7a14cbbd731794f7bbcd67870c1
SHA512

5b31f06b5798aa558acb67606aac00f25764bb9ba316af42e96039729cdb34471e331e8a82b5dd8e679d1edc628b5a9bb77dc4f03f114d67076d725c5992f378
SSDEEP

12288:MLTeH81jJUndhIEOXS71/TTZ692Ul72pCg/23VBO7iOpkjJejl2LrlHYaxf:t8MndhIpXS71/Td8Dl2C7BO7iOaJMALJ

Score

10^/10

agenttesla keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

91b69e17e757c1c3acc55009d0673944d53af7a14cbbd731794f7bbcd67870c1.exe

Resource

win7-20240419-en

agenttesla keylogger spyware stealer trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

91b69e17e757c1c3acc55009d0673944d53af7a14cbbd731794f7bbcd67870c1.exe

Resource

win10v2004-20240508-en

agenttesla keylogger spyware stealer trojan

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.ece.ubc.ca
Port:
587
Username:
[email protected]
Password:
coGo4321++
Email To:
[email protected]

Targets

- Target
  
  91b69e17e757c1c3acc55009d0673944d53af7a14cbbd731794f7bbcd67870c1
- Size
  
  705KB
- MD5
  
  d71c9662d3bd3f64f680bc63bd99a2db
- SHA1
  
  f4eb202735a10ec4fe221f20d6c9930e97950322
- SHA256
  
  91b69e17e757c1c3acc55009d0673944d53af7a14cbbd731794f7bbcd67870c1
- SHA512
  
  5b31f06b5798aa558acb67606aac00f25764bb9ba316af42e96039729cdb34471e331e8a82b5dd8e679d1edc628b5a9bb77dc4f03f114d67076d725c5992f378
- SSDEEP
  
  12288:MLTeH81jJUndhIEOXS71/TTZ692Ul72pCg/23VBO7iOpkjJejl2LrlHYaxf:t8MndhIpXS71/Td8Dl2C7BO7iOaJMALJ
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan

© 2018-2025

Terms | Privacy