Extracted

• • Target

    5.exe

  • Size

    1013KB

  • MD5

    189db4e11e7fd619dd4451bc6d1fb76f

  • SHA1

    1f5332ad8a7310405faed9bfbf4171e10de0114d

  • SHA256

    8b2c49f98c095c68891a42e4f2c030f91bc1f7e1b79fd585231af81d472bf079

  • SHA512

    125e06eaa126550d36416829021e5a7fd7e533e56c17e9a4344b9976337693bbdd1ef2ee18d7e826b1e9b3f29972c1a913e80d203180e30bd817fa1bd02c4287

  • SSDEEP

    24576:BAHnh+eWsN3skA4RV1Hom2KXMmHaJu2NmvMDU5:Yh+ZkldoPK8YaJuJ/

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2