agenttesla | c8c268e3157ef283bb456906ec37a44de12bea41a17c1e3ac70fb0ffe068a098 | Triage™

Login
Reports

Overview

overview

Static

static

1

secured_stub (1).ps1

windows10-2004-x64

secured_stub (1).ps1

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
secured_stub (1).ps1
Size 1.5MB
Sample260722-xla3aaah52
SHA256 c8c268e3157ef283bb456906ec37a44de12bea41a17c1e3ac70fb0ffe068a098
MD5 936d04f2b7f8ba64378af51e58a1758d
SHA1 cfa00a3e41848a0b510b44ccb69005a9840caad1
SHA512 b73a1938c683d90ea438915b870d28f60618b8ee7bcf0686afff2d285f538ff64e7833ad17bf4fb537cb9a6403003adef06a79cf6133d19d2e9f1c4de283946c
SSDEEP 24576:Z3f2P7GbpC7h5dsih7aovEh6AzSJUvr0C40rUuBzFfW5SgS:J
TLSH
T16075622A619838EB367B1B39F5F81C9CE1B31786828E25A710F0BD8372632DDD55815F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

agenttesla collection discovery execution keylogger spyware stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

secured_stub (1).ps1

Resource

win10v2004-20260513-en

windows10-2004-x64

9 signatures

150 seconds

collection discovery execution agenttesla keylogger spyware stealer trojan

Behavioral task

behavioral2

Sample

secured_stub (1).ps1

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

9 signatures

150 seconds

collection discovery execution agenttesla keylogger spyware stealer trojan

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.polizas.gr
Port
587
Username
[email protected]
Password
qB2s54#7a
Email to
[email protected]

Targets

- Target
  secured_stub (1).ps1
- Size 1.5MB
- SHA256 c8c268e3157ef283bb456906ec37a44de12bea41a17c1e3ac70fb0ffe068a098
- MD5 936d04f2b7f8ba64378af51e58a1758d
- SHA1 cfa00a3e41848a0b510b44ccb69005a9840caad1
- SHA512 b73a1938c683d90ea438915b870d28f60618b8ee7bcf0686afff2d285f538ff64e7833ad17bf4fb537cb9a6403003adef06a79cf6133d19d2e9f1c4de283946c
- SSDEEP 24576:Z3f2P7GbpC7h5dsih7aovEh6AzSJUvr0C40rUuBzFfW5SgS:J
- TLSH
  T16075622A619838EB367B1B39F5F81C9CE1B31786828E25A710F0BD8372632DDD55815F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

collection discovery execution agenttesla keylogger spyware stealer trojan
- Family: AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Accesses Microsoft Outlook profiles
  collection
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Email Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

collectiondiscoveryexecutionagentteslakeyloggerspywarestealertrojan

behavioral2

collectiondiscoveryexecutionagentteslakeyloggerspywarestealertrojan

© 2018-2026

Terms | Privacy