agenttesla | 143255a5ba28e866c50698c6ba81c7aa37cc517dd3499754136be7cea093afb2 | Triage

Submit
Reports

Overview

overview

Static

static

3

PO_PDF24032024.exe

windows7-x64

PO_PDF24032024.exe

windows10-2004-x64

Sharing

General

Target

PO_PDF24032024.exe
Size

668KB
Sample

240327-cpj45sdc7w
MD5

a4e1da4de6991f0e7e6de4ab3497563c
SHA1

55fa99225cb02841d4b8bd4d207831f8631fe855
SHA256

143255a5ba28e866c50698c6ba81c7aa37cc517dd3499754136be7cea093afb2
SHA512

6c7dbda6d53963f5f20a150cc56f537d86a397f63e214c98ce78f110481cecdd2c36219a9ea9af17376d5ab0e1f6b86dfc4fdadcfa10529960de01660344d59c
SSDEEP

12288:Gf2Ov+kR/c07tYZLyOJ1nlffll8QNOBf7sjqDz6/wM5pu+BfjhKfAie:wFRU0BYZOEvlHkojSz63tKbe

Score

10^/10

agenttesla keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

PO_PDF24032024.exe

Resource

win7-20240221-en

agenttesla keylogger spyware stealer trojan

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

PO_PDF24032024.exe

Resource

win10v2004-20240319-en

agenttesla keylogger spyware stealer trojan

windows10-2004-x64

5 signatures

150 seconds

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
v116306.kasserver.com
Port:
587
Username:
[email protected]
Password:
T7qkM5vwo3t47fFh
Email To:
[email protected]

Targets

- Target
  
  PO_PDF24032024.exe
- Size
  
  668KB
- MD5
  
  a4e1da4de6991f0e7e6de4ab3497563c
- SHA1
  
  55fa99225cb02841d4b8bd4d207831f8631fe855
- SHA256
  
  143255a5ba28e866c50698c6ba81c7aa37cc517dd3499754136be7cea093afb2
- SHA512
  
  6c7dbda6d53963f5f20a150cc56f537d86a397f63e214c98ce78f110481cecdd2c36219a9ea9af17376d5ab0e1f6b86dfc4fdadcfa10529960de01660344d59c
- SSDEEP
  
  12288:Gf2Ov+kR/c07tYZLyOJ1nlffll8QNOBf7sjqDz6/wM5pu+BfjhKfAie:wFRU0BYZOEvlHkojSz63tKbe
Score

10^/10

agenttesla keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslakeyloggerspywarestealertrojan

© 2018-2024

Terms | Privacy