Extracted

Extracted

• • Target
    4c9992f294bc88aaab3386f5169a3605cdeec546366392c2aeca92078b9d95bc.exe
  • Size 237KB
  • SHA256 4c9992f294bc88aaab3386f5169a3605cdeec546366392c2aeca92078b9d95bc
  • MD5 11df7cb2571c6c9d54061b03eaf5db08
  • SHA1 0c4696bddf50e472f714507e0f7c3eb7ac929d5a
  • SHA512 aafadae234dd0bad13b74b18c1a1f87172118884e9dfc98f8741288d3e237232c700ad3ed0bf73333b59a2be0c1f9eb419e67ce44b9be5cf1c424654f539bb9a
  • SSDEEP 3072:c4I3/hpZm8OHzfqQHPdCjS28T0FyBT75/nY6XzTu:ch3/hpZmNDqgFCWV0FyJdY6j
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2