Extracted

Extracted

• • Target

    1c7ee45690fee558934965c300a69036be1d4b98261e620cda9386459ec1ee62.exe

  • Size

    93.0MB

  • MD5

    d371035b1afdf61e3d7b680bb60e95a2

  • SHA1

    319f10fab64a2b1422334684246980453cffe88f

  • SHA256

    1c7ee45690fee558934965c300a69036be1d4b98261e620cda9386459ec1ee62

  • SHA512

    126b37f55bdd928588b2c679d37377823c79dbe7c906c5071b7dd1adff930bcea33985cfb19f88bf12300cd1be40f42789390c1c5fa320c2777c22c1838ecfe9

  • SSDEEP

    12288:eRH1UoIG5MPUqRtEbPw2lllWoycGINu+uva5B+uzcgZjlHQp+daty5Ik:sUobyzRtYw8ls5cGc9uyL9Hmre

  Score

  10^/10

  agentteslacredential_accessdiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2