agenttesla | 3c73fc6ab8a765ea48a1ee51a2a3142fe05332e4661c2f2ec0526ae225acf308 | Triage™

Login
Reports

Overview

overview

Static

static

DHL_Docume...ml.exe

windows7_x64

DHL_Docume...ml.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
DHL_Document.pdf.html.exe
Size 1.1MB
Sample200731-jnsce8rb4n
SHA256 3c73fc6ab8a765ea48a1ee51a2a3142fe05332e4661c2f2ec0526ae225acf308
MD5 31b4bc2449c8f98227e5d6180ea3008c
SHA1 a05f086c7b914d195b8ab737479126ff8a2d961c
SHA512 4afd73755a1472e3e71ef0db24d2bc8a80283918baada74074a71f7683598ab0a0a26ab029b36b8f154f9bd8b488e82eec11cf1942365b9eb2e9d085248210d5
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

DHL_Document.pdf.html.exe

Resource

win7v200722

windows7_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Behavioral task

behavioral2

Sample

DHL_Document.pdf.html.exe

Resource

win10

windows10_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.framafilms.com
Port
587
Username
[email protected]
Password
lister11

Targets

- Target
  DHL_Document.pdf.html.exe
- Size 1.1MB
- SHA256 3c73fc6ab8a765ea48a1ee51a2a3142fe05332e4661c2f2ec0526ae225acf308
- MD5 31b4bc2449c8f98227e5d6180ea3008c
- SHA1 a05f086c7b914d195b8ab737479126ff8a2d961c
- SHA512 4afd73755a1472e3e71ef0db24d2bc8a80283918baada74074a71f7683598ab0a0a26ab029b36b8f154f9bd8b488e82eec11cf1942365b9eb2e9d085248210d5
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

agentteslakeyloggerpersistencespywarestealertrojan

© 2018-2026

Terms | Privacy