agenttesla | fd1dc434508928bc6ebdb5d29de7a1530f64b5d9eb8a9a577f97db741a62a644 | Triage™

Login
Reports

Overview

overview

Static

static

HBL-202105...CE.exe

windows7_x64

HBL-202105...CE.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
HBL-20210508 INVOICE.exe
Size 808KB
Sample210508-82273fsnc2
SHA256 fd1dc434508928bc6ebdb5d29de7a1530f64b5d9eb8a9a577f97db741a62a644
MD5 48ec48b480a6a7e168da0d935a1d7aa4
SHA1 3a4a72e84866ca8da0c60505b48a5a530240f2f5
SHA512 63f49ce2580a52109f38d4375efb20a0c21cb47d2c613e9e733454a6cff3b39ae38d6cd944dbbbaa6e7443dbb94615c17785c225e97364ecc1ee82008e2ad151
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

HBL-20210508 INVOICE.exe

Resource

win7v20210410

windows7_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Behavioral task

behavioral2

Sample

HBL-20210508 INVOICE.exe

Resource

win10v20210410

windows10_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.prinutrition.com
Port
587
Username
[email protected]
Password
forrest

Targets

- Target
  HBL-20210508 INVOICE.exe
- Size 808KB
- SHA256 fd1dc434508928bc6ebdb5d29de7a1530f64b5d9eb8a9a577f97db741a62a644
- MD5 48ec48b480a6a7e168da0d935a1d7aa4
- SHA1 3a4a72e84866ca8da0c60505b48a5a530240f2f5
- SHA512 63f49ce2580a52109f38d4375efb20a0c21cb47d2c613e9e733454a6cff3b39ae38d6cd944dbbbaa6e7443dbb94615c17785c225e97364ecc1ee82008e2ad151
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

agentteslakeyloggerpersistencespywarestealertrojan

© 2018-2026

Terms | Privacy