agenttesla | 86360d8e1d473b72a48bdc1e7de4cd2fe3c20cc94c22fb4463ea15328d40f2c4 | Triage™

Login
Reports

Overview

overview

Static

static

H.T.P. HIG...~0.exe

windows7_x64

H.T.P. HIG...~0.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
H.T.P. HIGH TECH PRODUCTS CATALOGUE.pdf~0.exe
Size 574KB
Sample211123-tegppsaehm
SHA256 86360d8e1d473b72a48bdc1e7de4cd2fe3c20cc94c22fb4463ea15328d40f2c4
MD5 5204b13df3daf3e049dc73662882123c
SHA1 26727c734fda4276a9f0fecbcc51b63a07fc0a0a
SHA512 bf5990b9932dfc12a9f87b4d7a176bbbd9420fb2f6cc3dbf98e04946c80ecedcc235e673e2023288b55ea014b05c6eca04f2a45cef7d960bd6b0ebf62df50ae9
MD5 SHA1 SHA512

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

H.T.P. HIGH TECH PRODUCTS CATALOGUE.pdf~0.exe

Resource

win7-en-20211104

windows7_x64

0 signatures

0 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

H.T.P. HIGH TECH PRODUCTS CATALOGUE.pdf~0.exe

Resource

win10-en-20211104

windows10_x64

0 signatures

0 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
smtp.yandex.com
Port
587
Username
[email protected]
Password
graceofgod@amen

Targets

- Target
  H.T.P. HIGH TECH PRODUCTS CATALOGUE.pdf~0.exe
- Size 574KB
- SHA256 86360d8e1d473b72a48bdc1e7de4cd2fe3c20cc94c22fb4463ea15328d40f2c4
- MD5 5204b13df3daf3e049dc73662882123c
- SHA1 26727c734fda4276a9f0fecbcc51b63a07fc0a0a
- SHA512 bf5990b9932dfc12a9f87b4d7a176bbbd9420fb2f6cc3dbf98e04946c80ecedcc235e673e2023288b55ea014b05c6eca04f2a45cef7d960bd6b0ebf62df50ae9
- MD5 SHA1 SHA512
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla Payload
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy