agenttesla | 4b42736ecde39daded49aeed39e954dbda6536359f9b4c6713944d0658248c71 | Triage™

Login
Reports

Overview

overview

Static

static

1

stubz.ps1

windows10-2004-x64

stubz.ps1

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
stubz.ps1
Size 992KB
Sample260708-pxkrvsgy5p
SHA256 4b42736ecde39daded49aeed39e954dbda6536359f9b4c6713944d0658248c71
MD5 3768f531412df785abcdfb25b0615b19
SHA1 e1afe263bedba68919565d60a7cadcabb78f68f6
SHA512 596788c339160f93c9473b0c652f11d3a4263281ea92e22026b8076c09c7ef8ea998a87215f72612e030eeb2044ce3dca198edd1580d194c56959bbb600ee433
SSDEEP 24576:vPRAHl1lWA6h6yMlP2U8Y/2bXIUWr78jTw:2XcbiV+xWrS0
TLSH
T1AA252391BFA63E7E52B4822AF017CD9D49F1169534648FBBA4D90ED7100E9C2B7CB930
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

agenttesla collection discovery execution keylogger spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

stubz.ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

10 signatures

150 seconds

collection discovery execution agenttesla keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

stubz.ps1

Resource

win11ltsc2024-20260706-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

collection discovery execution agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.pgsu.co.id
Port
587
Username
[email protected]
Password
Vecls16@Vezs
Email to
[email protected]

Targets

- Target
  stubz.ps1
- Size 992KB
- SHA256 4b42736ecde39daded49aeed39e954dbda6536359f9b4c6713944d0658248c71
- MD5 3768f531412df785abcdfb25b0615b19
- SHA1 e1afe263bedba68919565d60a7cadcabb78f68f6
- SHA512 596788c339160f93c9473b0c652f11d3a4263281ea92e22026b8076c09c7ef8ea998a87215f72612e030eeb2044ce3dca198edd1580d194c56959bbb600ee433
- SSDEEP 24576:vPRAHl1lWA6h6yMlP2U8Y/2bXIUWr78jTw:2XcbiV+xWrS0
- TLSH
  T1AA252391BFA63E7E52B4822AF017CD9D49F1169534648FBBA4D90ED7100E9C2B7CB930
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

collection discovery execution agenttesla keylogger spyware stealer trojan
- Family: AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

collectiondiscoveryexecutionagentteslakeyloggerspywarestealertrojan

behavioral2

collectiondiscoveryexecutionagentteslakeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy