agenttesla | 550f191396c9c2cbf09784f60faab836d4d1796c39d053d0a379afaca05f8ee8 | Triage

Submit
Reports

Overview

overview

Static

static

5

550f191396...e8.exe

windows7-x64

550f191396...e8.exe

windows10-2004-x64

Sharing

General

Target

550f191396c9c2cbf09784f60faab836d4d1796c39d053d0a379afaca05f8ee8
Size

939KB
Sample

241223-blb4patjaw
MD5

ec54045f7ad123ecdf1cdd43d5303db8
SHA1

97a0f467d3cf0aed02a48927ec5bb3a2a64d1db0
SHA256

550f191396c9c2cbf09784f60faab836d4d1796c39d053d0a379afaca05f8ee8
SHA512

b3b5d3c7d51556a341ba39a6065c8163d84fd9ec4b8a20b33b2a695203fe41a37952afcb8ff269bff817267f5e05b30bc5b84b9ee8e451c0c2b84396c602e5b7
SSDEEP

24576:uRmJkcoQricOIQxiZY1iaCQJzpvlcsmcjE2CE0:7JZoQrbTFZY1iaCQJzl+JqDE

Score

10^/10

agenttesla discovery keylogger spyware stealer trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

550f191396c9c2cbf09784f60faab836d4d1796c39d053d0a379afaca05f8ee8.exe

Resource

win7-20240903-en

agenttesla discovery keylogger spyware stealer trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

550f191396c9c2cbf09784f60faab836d4d1796c39d053d0a379afaca05f8ee8.exe

Resource

win10v2004-20241007-en

agenttesla discovery keylogger spyware stealer trojan

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  550f191396c9c2cbf09784f60faab836d4d1796c39d053d0a379afaca05f8ee8
- Size
  
  939KB
- MD5
  
  ec54045f7ad123ecdf1cdd43d5303db8
- SHA1
  
  97a0f467d3cf0aed02a48927ec5bb3a2a64d1db0
- SHA256
  
  550f191396c9c2cbf09784f60faab836d4d1796c39d053d0a379afaca05f8ee8
- SHA512
  
  b3b5d3c7d51556a341ba39a6065c8163d84fd9ec4b8a20b33b2a695203fe41a37952afcb8ff269bff817267f5e05b30bc5b84b9ee8e451c0c2b84396c602e5b7
- SSDEEP
  
  24576:uRmJkcoQricOIQxiZY1iaCQJzpvlcsmcjE2CE0:7JZoQrbTFZY1iaCQJzl+JqDE
Score

10^/10

agenttesla discovery keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Agenttesla family
  agenttesla
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agenttesladiscoverykeyloggerspywarestealertrojan

behavioral2

agenttesladiscoverykeyloggerspywarestealertrojan

© 2018-2025

Terms | Privacy