Extracted

Extracted

• • Target

    a1cf25d1db64f0770a13d3179a2709f08c231b5133c7f2adb2fa450bc69c887b

  • Size

    240KB

  • MD5

    3b5b4b45e6beb94f7598b7dd02acc32d

  • SHA1

    1d7fbf2cc01a132ebf0dca52aee4f88280a20055

  • SHA256

    a1cf25d1db64f0770a13d3179a2709f08c231b5133c7f2adb2fa450bc69c887b

  • SHA512

    9eeeb8a27bf796bfd057319b412ed1028a2003f7924680088d3fa6c06f9fbf0bdb5f23aaaeda3a4cb9b807e31a731b1063170161edd2fc96e35df30d00ea2c39

  • SSDEEP

    3072:3FznrXDLced7KEzyA4AId6MMiZ5c5ScRN2X:3FznrXDLced7HmJAO6MNwScn

  Score

  10^/10

  agenttesladiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Agenttesla family

    agenttesla

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2