Extracted

• • Target
    1697540225c86c95aba296dec771dc1572323137d713a18259a333b3b4488d31bad3f13229691.dat-decoded.exe
  • Size 242KB
  • SHA256 39eeda113ece91266296dfc3b9d00a6740bee7b0e695c277e49fa1966b8dfda9
  • MD5 a8e8d4667f96ea847d18eb7830fb1dc6
  • SHA1 401a70be80965acc2f505435736561caed55158c
  • SHA512 d21d7c2409a8b7e4698ddcb7ca9926a81958cdbe14fe8e8d9943019b7876109fb9d245773dd25e96694e48813eb8dad2c53fe680cd7aa1d97a463c6450d31712
  • SSDEEP 3072:yPW1gv3nff9cFdx/WaC/nhaXdTX/AZejC5lQ/QZNS9/:CW1gv3nffSFdkaC/nhaNTvAZip/Qq
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2