agenttesla | 1376ea9e59ee41daa234e3f1cafc5846f79b9038c7421630d560b27132532841 | Triage™

Login
Reports

Overview

overview

Static

static

5

1376ea9e59...41.exe

windows10-2004-x64

1376ea9e59...41.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
1376ea9e59ee41daa234e3f1cafc5846f79b9038c7421630d560b27132532841
Size 356KB
Sample260822-jetzxssdmf
SHA256 1376ea9e59ee41daa234e3f1cafc5846f79b9038c7421630d560b27132532841
MD5 c1f146716d1a26fc6a206acecf3de396
SHA1 66739b5b664fd7ee80a5d2d374d71cc7e5c0b2a9
SHA512 5f82b154bb14cca32a16a5bbeab4619e7428b325ce00b346d9d61c2c6ae181eff3832ee4010e089f82543953209541fd61ba1f590538c9bcbf8cad8479b103d3
SSDEEP 6144:qfVvgXZZVt4EO1CloV2CwuhiLefw8te0n/IstiCwtD:qKthBCwKiLefw8te03iP
TLSH
T12674E03DA7855FA2D2AD047A94E7F14213348C62B30AF707AEC1F5605CFB3EA5422657
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

agenttesla collection credential_access discovery keylogger spyware stealer trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

1376ea9e59ee41daa234e3f1cafc5846f79b9038c7421630d560b27132532841.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

collection credential_access discovery agenttesla keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

1376ea9e59ee41daa234e3f1cafc5846f79b9038c7421630d560b27132532841.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

collection credential_access discovery agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5279095555:AAE4HwAzPbUle9whPqEu6faWeNRU-6BRHps/sendDocument

Targets

- Target
  1376ea9e59ee41daa234e3f1cafc5846f79b9038c7421630d560b27132532841
- Size 356KB
- SHA256 1376ea9e59ee41daa234e3f1cafc5846f79b9038c7421630d560b27132532841
- MD5 c1f146716d1a26fc6a206acecf3de396
- SHA1 66739b5b664fd7ee80a5d2d374d71cc7e5c0b2a9
- SHA512 5f82b154bb14cca32a16a5bbeab4619e7428b325ce00b346d9d61c2c6ae181eff3832ee4010e089f82543953209541fd61ba1f590538c9bcbf8cad8479b103d3
- SSDEEP 6144:qfVvgXZZVt4EO1CloV2CwuhiLefw8te0n/IstiCwtD:qKthBCwKiLefw8te03iP
- TLSH
  T12674E03DA7855FA2D2AD047A94E7F14213348C62B30AF707AEC1F5605CFB3EA5422657
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

collection credential_access discovery agenttesla keylogger spyware stealer trojan
- Family: AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Unsecured Credentials: Credentials In Files
  Steal credentials from unsecured files.
  credential_access stealer
- Uses the VBS compiler for execution
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

collectioncredential_accessdiscoveryagentteslakeyloggerspywarestealertrojan

behavioral2

collectioncredential_accessdiscoveryagentteslakeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy