agenttesla | a0b5de830a76e57dfcd1c6960cbe3542a18f1eb091a8968ce319da1e4b839039 | Triage™

Login
Reports

Overview

overview

Static

static

3

Modis list.exe

windows7-x64

Modis list.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
Modis list.zip
Size 701KB
Sample230616-nffadaed61
SHA256 a0b5de830a76e57dfcd1c6960cbe3542a18f1eb091a8968ce319da1e4b839039
MD5 3fb1d5127bfc6cfed5001da7460aafef
SHA1 edae9ffb83a842f640588589658535afef093d3a
SHA512 b693743fec01464157c7c54a277f4a4ef7530649dc026f93b407b3b3956a2e0cc6d82cf7c8eeb801210ab81f103374c75d56370f64ebc0284541c614cbf38d76
SSDEEP 12288:qd7QYabcQavlDDKl42UzuQDQe0IGYwiAb8UR/MaSrRTkefO:qd73abcQavtD841yQDJ1GBi4RWlkoO
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Modis list.exe

Resource

win7-20230220-en

windows7-x64

8 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

Modis list.exe

Resource

win10v2004-20230220-en

windows10-2004-x64

7 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
sarahfoils.com
Port
587
Username
[email protected]
Password
Scalatica01
Email to
[email protected]

Targets

- Target
  Modis list.exe
- Size 758KB
- SHA256 fd4226a0d754290aa133ea1a8606846290cac4ec317a8622072d38fca80e8bbe
- MD5 5119c03df1becd83ce7de22565c5fc4d
- SHA1 66bbd656f3476d4fee3c430724b1392a1bca92ac
- SHA512 903c69e54df8f8f0685e1988bdaa416e210d4b75e1c0be384b38b9c6dbe647823d85ff5d55a3e2b754017d0aa61536d64959fd47e2a01a3237712ad08135ae65
- SSDEEP 12288:sVRQIcb2Cx71529M9tKZ424z8Q/meusGyi2QNixRFMESrROrQza5KtbGIQrOMRCV:ORtcb2Cxp52GtW4hYQ/PpGN2TXO88z30
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy