agenttesla | ca007259e84050359f90079e2dd6d6ebde31872f64f65fcd47ce01531e7b6bb3 | Triage

Submit
Reports

Overview

overview

Static

static

3

eaed910ec2...18.exe

windows7-x64

eaed910ec2...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

eaed910ec2f38b480c809a8ddda95b4f_JaffaCakes118
Size

624KB
Sample

240410-m9jn8ade76
MD5

eaed910ec2f38b480c809a8ddda95b4f
SHA1

c6944445e143600f3a63f6cd2d3fb34dd8a2e48f
SHA256

ca007259e84050359f90079e2dd6d6ebde31872f64f65fcd47ce01531e7b6bb3
SHA512

5aa1fe035e98b6112bc3b62baaf89ada770a9f279381a5a13e2bb129280bb45e8390aa753b12638cf4acf8bb2f4ab628680ab909ca5ec76348cea3e470351491
SSDEEP

12288:kzsm17xPfJgbU7DuVDY9EEMNHJ8KpxHRtlVhGlGn7deT1Af7:kzsSnJkU7aVk9ELNp8i

Score

10^/10

agenttesla collection keylogger spyware stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

eaed910ec2f38b480c809a8ddda95b4f_JaffaCakes118.exe

Resource

win7-20240220-en

agenttesla keylogger spyware stealer trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

eaed910ec2f38b480c809a8ddda95b4f_JaffaCakes118.exe

Resource

win10v2004-20240226-en

agenttesla collection keylogger spyware stealer trojan

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.framafilms.com
Port:
587
Username:
[email protected]
Password:
lister11

Targets

- Target
  
  eaed910ec2f38b480c809a8ddda95b4f_JaffaCakes118
- Size
  
  624KB
- MD5
  
  eaed910ec2f38b480c809a8ddda95b4f
- SHA1
  
  c6944445e143600f3a63f6cd2d3fb34dd8a2e48f
- SHA256
  
  ca007259e84050359f90079e2dd6d6ebde31872f64f65fcd47ce01531e7b6bb3
- SHA512
  
  5aa1fe035e98b6112bc3b62baaf89ada770a9f279381a5a13e2bb129280bb45e8390aa753b12638cf4acf8bb2f4ab628680ab909ca5ec76348cea3e470351491
- SSDEEP
  
  12288:kzsm17xPfJgbU7DuVDY9EEMNHJ8KpxHRtlVhGlGn7deT1Af7:kzsSnJkU7aVk9ELNp8i
Score

10^/10

agenttesla keylogger spyware stealer trojan collection
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- AgentTesla payload
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslakeyloggerspywarestealertrojan

behavioral2

agentteslacollectionkeyloggerspywarestealertrojan

© 2018-2025

Terms | Privacy