agenttesla | b933729c4bb21f187edc94a4eec48071176deedc7360d0bf9c3c0904f1be634b | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

5

B933729C4B...4B.exe

windows7-x64

B933729C4B...4B.exe

windows10-2004-x64

Sharing

General

Target

B933729C4BB21F187EDC94A4EEC48071176DEEDC7360D0BF9C3C0904F1BE634B
Size

1.2MB
Sample

250103-jqhe9svmbz
MD5

1cfe042a2242aef040dfeda306aeab81
SHA1

7da28f7a2d2a6443c884918f38cf5be58a8ad917
SHA256

b933729c4bb21f187edc94a4eec48071176deedc7360d0bf9c3c0904f1be634b
SHA512

340d4f24aa9b442aa092d1058deea1a4193fb682334f341dfd9f189403f6a371d0cec8efde572ed1b5291966a4e16528f2efe4aef59aa869238e3f8322ddd194
SSDEEP

24576:VqDEvCTbMWu7rQYlBQcBiT6rprG8aAfdbgBwfjKwdtOYq:VTvC/MTQYxsWR7aAf9MwdtO

Score

10^/10

agenttesla discovery keylogger spyware stealer trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

B933729C4BB21F187EDC94A4EEC48071176DEEDC7360D0BF9C3C0904F1BE634B.exe

Resource

win7-20240903-en

agenttesla discovery keylogger spyware stealer trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

B933729C4BB21F187EDC94A4EEC48071176DEEDC7360D0BF9C3C0904F1BE634B.exe

Resource

win10v2004-20241007-en

agenttesla discovery keylogger spyware stealer trojan

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  B933729C4BB21F187EDC94A4EEC48071176DEEDC7360D0BF9C3C0904F1BE634B
- Size
  
  1.2MB
- MD5
  
  1cfe042a2242aef040dfeda306aeab81
- SHA1
  
  7da28f7a2d2a6443c884918f38cf5be58a8ad917
- SHA256
  
  b933729c4bb21f187edc94a4eec48071176deedc7360d0bf9c3c0904f1be634b
- SHA512
  
  340d4f24aa9b442aa092d1058deea1a4193fb682334f341dfd9f189403f6a371d0cec8efde572ed1b5291966a4e16528f2efe4aef59aa869238e3f8322ddd194
- SSDEEP
  
  24576:VqDEvCTbMWu7rQYlBQcBiT6rprG8aAfdbgBwfjKwdtOYq:VTvC/MTQYxsWR7aAf9MwdtO
Score

10^/10

agenttesla discovery keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Agenttesla family
  agenttesla
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agenttesladiscoverykeyloggerspywarestealertrojan

behavioral2

agenttesladiscoverykeyloggerspywarestealertrojan

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.