agenttesla | 149a430a6f9f5316febfc555e4c26b07139dd519a723bd2f11e2edb8f500fae9 | Triage™

Login
Reports

Overview

overview

Static

static

5

d599cd22b3...ec.exe

windows10-2004-x64

d599cd22b3...ec.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
d599cd22b34287261efa52b26e4ba1e7c94b31e0f06994a68ce60fe8b9cbbeec.exe
Size 1.1MB
Sample260205-sd7n3agx5h
SHA256 149a430a6f9f5316febfc555e4c26b07139dd519a723bd2f11e2edb8f500fae9
MD5 41ab4411b133af01e5c85219bbfe200a
SHA1 cf06cb32452e94b3673ce87eabfc88e2c23a2c50
SHA512 e5d77bcaf98a22fd00e6f73c9f90e0dc999f2f88fa1d9d98bfc0fd84bc23d0e5c9f66374cb92e3f50d2991e03c2b6ad428b11433c1ad9687bd05c0c11892cb73
SSDEEP 24576:H5EmXFtKaL4/oFe5T9yyXYfP1MAXDzsezky6O:HPVt/LZeJbInGizsoky
TLSH
T14335AE0273C1D062FFAB91734F56F6115BBC79260123AA2F13981D7ABA701B1563E7A3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

agenttesla discovery keylogger spyware stealer trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

d599cd22b34287261efa52b26e4ba1e7c94b31e0f06994a68ce60fe8b9cbbeec.exe

Resource

win10v2004-20260130-en

windows10-2004-x64

11 signatures

150 seconds

discovery agenttesla keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

d599cd22b34287261efa52b26e4ba1e7c94b31e0f06994a68ce60fe8b9cbbeec.exe

Resource

win11-20260130-en

windows11-21h2-x64

12 signatures

150 seconds

discovery agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.cottondreams.org
Port
587
Username
[email protected]
Password
Payday2025
Email to
[email protected]

Targets

- Target
  d599cd22b34287261efa52b26e4ba1e7c94b31e0f06994a68ce60fe8b9cbbeec.exe
- Size 1.1MB
- SHA256 149a430a6f9f5316febfc555e4c26b07139dd519a723bd2f11e2edb8f500fae9
- MD5 41ab4411b133af01e5c85219bbfe200a
- SHA1 cf06cb32452e94b3673ce87eabfc88e2c23a2c50
- SHA512 e5d77bcaf98a22fd00e6f73c9f90e0dc999f2f88fa1d9d98bfc0fd84bc23d0e5c9f66374cb92e3f50d2991e03c2b6ad428b11433c1ad9687bd05c0c11892cb73
- SSDEEP 24576:H5EmXFtKaL4/oFe5T9yyXYfP1MAXDzsezky6O:HPVt/LZeJbInGizsoky
- TLSH
  T14335AE0273C1D062FFAB91734F56F6115BBC79260123AA2F13981D7ABA701B1563E7A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Agenttesla family
  agenttesla
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryagentteslakeyloggerspywarestealertrojan

behavioral2

discoveryagentteslakeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy