Extracted

Extracted

• • Target
    115d87a66291631d63ef7aac7425b8a0300043d99d9ec4e6ed574ff74f107794
  • Size 232KB
  • SHA256 115d87a66291631d63ef7aac7425b8a0300043d99d9ec4e6ed574ff74f107794
  • MD5 22140631e30e80479d6f53462532db6f
  • SHA1 651fd7e77f139b5f8a54477a836a39bd4869eedc
  • SHA512 7f096614440aab7045744a96184cf5846b84b6d4f634567f5adf53175291807b79ceb2acdb4d086d2e23484e47df5e654943854a210e9e385e16738a1325b5de
  • SSDEEP 3072:Ykndjnb3zGwN2ESzEVSKm+9w45uv7O9O1f:fndjnb3zvNNQjKm+9wvzOA1
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2