Extracted

Extracted

• • Target

    db7d96f8ee567f9358b4746b7d2ee4d39c66cb2854ddfbe80ac2d878caf1b132.exe

  • Size

    646KB

  • MD5

    a6c38f90bab12e5ccb14cd079aa1369e

  • SHA1

    8327cf1ce6a1125c0ff17ec496e695ab90f7afcd

  • SHA256

    db7d96f8ee567f9358b4746b7d2ee4d39c66cb2854ddfbe80ac2d878caf1b132

  • SHA512

    beff27d66f81ccf0c6cedf76d6cc7872b87fcae776465bf0d5392467429737df02c5d8bfa6ac6781c026bb2d89f9f1398f06d9c920d0fe0c8af30a3652659dcf

  • SSDEEP

    12288:w/5s/qjqYBXov753GyjEHLiKlw6xQbwMTAw61EuR1y/57pt+wxkR:wkpUXov753DEHLiKlw6x+iWy1Y7pt+3

  Score

  10^/10

  agentteslacredential_accessdiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2