agenttesla | cfdb0092d5a19db30d909d1cc1d883d441645e8b1641d9702a7cc7b1e78a4fb2 | Triage

Submit
Reports

Overview

overview

Static

static

5

Shipping D...86.exe

windows7-x64

Shipping D...86.exe

windows10-2004-x64

Sharing

General

Target

Shipping Document #100020486.exe
Size

1.1MB
Sample

241003-3g43fsselj
MD5

e42af0cd5d1346c37934b2887add33fa
SHA1

8962c64a6ea03e1e4d78c50edfd591320863981e
SHA256

cfdb0092d5a19db30d909d1cc1d883d441645e8b1641d9702a7cc7b1e78a4fb2
SHA512

8ffdbff3427e7cdfdf4195714534f3208eaec433b58be781d6284ab8a96b5169c2bb33ee82629fe0dee8c7f9f7ce9b5c31a16301c3ff8b492ac14838037d96d3
SSDEEP

24576:ffmMv6Ckr7Mny5QLRbVt4cVsHqRoJpC2QLOFKfW73hY:f3v+7/5QLRbVi5qAXLW

Score

10^/10

agenttesla discovery keylogger spyware stealer trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Shipping Document #100020486.exe

Resource

win7-20240903-en

agenttesla discovery keylogger spyware stealer trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

Shipping Document #100020486.exe

Resource

win10v2004-20240802-en

agenttesla discovery keylogger spyware stealer trojan

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
srv.masternic.net
Port:
587
Username:
[email protected]
Password:
-H{2Szxi!%qb
Email To:
[email protected]

Targets

- Target
  
  Shipping Document #100020486.exe
- Size
  
  1.1MB
- MD5
  
  e42af0cd5d1346c37934b2887add33fa
- SHA1
  
  8962c64a6ea03e1e4d78c50edfd591320863981e
- SHA256
  
  cfdb0092d5a19db30d909d1cc1d883d441645e8b1641d9702a7cc7b1e78a4fb2
- SHA512
  
  8ffdbff3427e7cdfdf4195714534f3208eaec433b58be781d6284ab8a96b5169c2bb33ee82629fe0dee8c7f9f7ce9b5c31a16301c3ff8b492ac14838037d96d3
- SSDEEP
  
  24576:ffmMv6Ckr7Mny5QLRbVt4cVsHqRoJpC2QLOFKfW73hY:f3v+7/5QLRbVi5qAXLW
Score

10^/10

agenttesla discovery keylogger spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agenttesladiscoverykeyloggerspywarestealertrojan

behavioral2

agenttesladiscoverykeyloggerspywarestealertrojan

© 2018-2025

Terms | Privacy