agenttesla | 9863d85fe69d5b6a6dc3773b94f9f56cd836f78b9cee4e1d28d8fdb2a5a42f2f | Triage™

Login
Reports

Overview

overview

Static

static

Order 0104...df.exe

windows7_x64

Order 0104...df.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
Order 01042021-V728394-H16.pdf.exe
Size 992KB
Sample210405-2v38b6pkcx
SHA256 9863d85fe69d5b6a6dc3773b94f9f56cd836f78b9cee4e1d28d8fdb2a5a42f2f
MD5 ed676169811c08e60a154da40fd915db
SHA1 018fb0a97399904d7161cd774888e786a25d1087
SHA512 df05d25c9866fafc6bf331ea391941c4ba93447efb02ecdd505d49efa95340f7d071b27ac6b787a89f59315cbb3f398ec34db747794bafd6ad4cb3731f187056
MD5 SHA1 SHA512

Score

10^/10

agenttesla keylogger persistence spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

Order 01042021-V728394-H16.pdf.exe

Resource

win7v20201028

windows7_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Behavioral task

behavioral2

Sample

Order 01042021-V728394-H16.pdf.exe

Resource

win10v20201028

windows10_x64

0 signatures

0 seconds

agenttesla keylogger persistence spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.com
Port
587
Username
[email protected]
Password
opjis0123

Targets

- Target
  Order 01042021-V728394-H16.pdf.exe
- Size 992KB
- SHA256 9863d85fe69d5b6a6dc3773b94f9f56cd836f78b9cee4e1d28d8fdb2a5a42f2f
- MD5 ed676169811c08e60a154da40fd915db
- SHA1 018fb0a97399904d7161cd774888e786a25d1087
- SHA512 df05d25c9866fafc6bf331ea391941c4ba93447efb02ecdd505d49efa95340f7d071b27ac6b787a89f59315cbb3f398ec34db747794bafd6ad4cb3731f187056
- MD5 SHA1 SHA512
Score

10^/10

agenttesla keylogger persistence spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerpersistencespywarestealertrojan

behavioral2

agentteslakeyloggerpersistencespywarestealertrojan

© 2018-2026

Terms | Privacy