agenttesla | d8c86642c4e7e86d3591143c9bd7a7ca0278ed8812908b81e5633948ebee2eee | Triage™

Login
Reports

Overview

overview

Static

static

3

AD9613BCPZ...df.exe

windows7-x64

AD9613BCPZ...df.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
AD9613BCPZ COOPP03.23.pdf.exe
Size 528KB
Sample231114-pk3f5scc3s
SHA256 d8c86642c4e7e86d3591143c9bd7a7ca0278ed8812908b81e5633948ebee2eee
MD5 4f8bfa159936b3be25856a5a46cd980a
SHA1 49e41a9f9e6743dbe1afa8037ea6a77f98300d30
SHA512 a05593c6b808dd4b960dbfb17e6f14e00b2c41bde3bcc402c07bf3c63bd16fea7fa720d58a04221da61bf6bd9b02df8be2336847201b050fff96162f2896eccd
SSDEEP 6144:iQQHdq9bG0g6PTk2pXj0olT5Q0Qbaapoqgr/1teEiMgyusJ+FN+ODVd33LJPO0x6:9cd0gP2tj01+QoqblsaL5u0xc1r1N
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

AD9613BCPZ COOPP03.23.pdf.exe

Resource

win7-20231025-en

windows7-x64

7 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

AD9613BCPZ COOPP03.23.pdf.exe

Resource

win10v2004-20231020-en

windows10-2004-x64

7 signatures

150 seconds

agenttesla collection keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
us2.smtp.mailhostbox.com
Port
587
Username
[email protected]
Password
JUGCRsm9
Email to
[email protected]

Targets

- Target
  AD9613BCPZ COOPP03.23.pdf.exe
- Size 528KB
- SHA256 d8c86642c4e7e86d3591143c9bd7a7ca0278ed8812908b81e5633948ebee2eee
- MD5 4f8bfa159936b3be25856a5a46cd980a
- SHA1 49e41a9f9e6743dbe1afa8037ea6a77f98300d30
- SHA512 a05593c6b808dd4b960dbfb17e6f14e00b2c41bde3bcc402c07bf3c63bd16fea7fa720d58a04221da61bf6bd9b02df8be2336847201b050fff96162f2896eccd
- SSDEEP 6144:iQQHdq9bG0g6PTk2pXj0olT5Q0Qbaapoqgr/1teEiMgyusJ+FN+ODVd33LJPO0x6:9cd0gP2tj01+QoqblsaL5u0xc1r1N
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

agenttesla collection keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslacollectionkeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy