agenttesla | 7172af7364c97ca9cc642e7cee4902c4ef9049ac674a381683a8358fc625c540 | Triage™

Login
Reports

Overview

overview

Static

static

3

ef256da3ed...e2.exe

windows7-x64

ef256da3ed...e2.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
b2d6c9fae075b1a5b99d412757d86088.bin
Size 553KB
Sample240613-clb95a1bjg
SHA256 7172af7364c97ca9cc642e7cee4902c4ef9049ac674a381683a8358fc625c540
MD5 8af815584426c8d282fe62736078e5a0
SHA1 aca606e54e58b2391f54a97cf5fbcf7a7bf591a8
SHA512 7f1d0e14e9f995b5653b8a78da79777011a5ee2b75ffeaf805644632edebc292fc7e38ce7deb723c9ec645f42c44b0f6f32537c8f4ed9b2394bbe2424cbbea30
SSDEEP 12288:gYo4tgeAHYllgPgFIW4M/GXYPoDJkn3nUFYtO1VVW2Hg2WTy7y6E:NTmEllgOIypoKn3nGYt6wIg8E
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ef256da3ed2681fc13f3de7f541f387da9f232731830faa6f7dcb5e1f4b98de2.exe

Resource

win7-20240611-en

windows7-x64

8 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

ef256da3ed2681fc13f3de7f541f387da9f232731830faa6f7dcb5e1f4b98de2.exe

Resource

win10v2004-20240611-en

windows10-2004-x64

8 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
ftp
Host
ftp://ftp.svetigeorgije.co.rs
Port
21
Username
[email protected]
Password
4c5H&b2whkD9

Targets

- Target
  ef256da3ed2681fc13f3de7f541f387da9f232731830faa6f7dcb5e1f4b98de2.exe
- Size 824KB
- SHA256 ef256da3ed2681fc13f3de7f541f387da9f232731830faa6f7dcb5e1f4b98de2
- MD5 b2d6c9fae075b1a5b99d412757d86088
- SHA1 5828224abd89d9888002177d83f2d55176648e3c
- SHA512 e6ebfe61722eec7b0bdefcb2c630c5c7acfbdcb80aeda65dbec47f959e78090fea44e3b88cd5cf5e95e703d087dfe78426d706b8075a15aa0052dccb1b2ca9de
- SSDEEP 12288:QW/RA5STkep6Mlqnl3LkcBDVXFamBD/UFHn07KrBSxF6w7RTIY73d:QMm5SH6MIl3LkGDhsmD/U0iO7xIw3d
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy