agenttesla | 39e885110ea41b64da0597e267754cf951b6932d52a956e47d35e3fbcdbf0281 | Triage™

Login
Reports

Overview

overview

Static

static

5

339a226653...9b.exe

windows10-2004-x64

339a226653...9b.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
339a2266533304573cdeb1138bca268419acfdebd5767866df313cb6b078399b.exe
Size 1.1MB
Sample260204-phx4msh19e
SHA256 39e885110ea41b64da0597e267754cf951b6932d52a956e47d35e3fbcdbf0281
MD5 b0ed2073206a7ba7b047c370aa398ff9
SHA1 370c4cdfb52b2a5ddeeeb350209f5a7a6e1e064c
SHA512 a4dfd48ab9bb73af15f483e54f66a079fdc53cd191f0917bfb05814d47527decdaf1430455259f7b924907c0e6dd0c292f6a6f812ae5bec4786897b501c3952d
SSDEEP 24576:q5EmXFtKaL4/oFe5T9yyXYfP1MAXDzReRsYaJEO8gv+:qPVt/LZeJbInGizReRgL8
TLSH
T15235AE0273C1D062FFAB92734B5AF6115ABC79260123E62F13981D7ABD701B1563E7A3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

agenttesla discovery keylogger spyware stealer trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

339a2266533304573cdeb1138bca268419acfdebd5767866df313cb6b078399b.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

11 signatures

150 seconds

discovery agenttesla keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

339a2266533304573cdeb1138bca268419acfdebd5767866df313cb6b078399b.exe

Resource

win11-20260130-en

windows11-21h2-x64

11 signatures

150 seconds

discovery agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.cottondreams.org
Port
587
Username
[email protected]
Password
Payday2025
Email to
[email protected]

Targets

- Target
  339a2266533304573cdeb1138bca268419acfdebd5767866df313cb6b078399b.exe
- Size 1.1MB
- SHA256 39e885110ea41b64da0597e267754cf951b6932d52a956e47d35e3fbcdbf0281
- MD5 b0ed2073206a7ba7b047c370aa398ff9
- SHA1 370c4cdfb52b2a5ddeeeb350209f5a7a6e1e064c
- SHA512 a4dfd48ab9bb73af15f483e54f66a079fdc53cd191f0917bfb05814d47527decdaf1430455259f7b924907c0e6dd0c292f6a6f812ae5bec4786897b501c3952d
- SSDEEP 24576:q5EmXFtKaL4/oFe5T9yyXYfP1MAXDzReRsYaJEO8gv+:qPVt/LZeJbInGizReRgL8
- TLSH
  T15235AE0273C1D062FFAB92734B5AF6115ABC79260123E62F13981D7ABD701B1563E7A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Agenttesla family
  agenttesla
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryagentteslakeyloggerspywarestealertrojan

behavioral2

discoveryagentteslakeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy