Extracted

• • Target

    A REQUESTFORVALIDBANKACCOUNTDETAIL/A REQUESTFORVALIDBANKACCOUNTDETAIL.exe

  • Size

    192KB

  • MD5

    93c7b66d77406f6b64507631a24bc140

  • SHA1

    ad6c3790c982c6f5cf0fc34a0ff9d2098d7df8b5

  • SHA256

    95687da203507a11837eaeb29bfe86481828b74b62fc869604b5eaa552f950c2

  • SHA512

    5b9d4d085d84ff215c70e49cb7d15c1d512996fe48b711d54a2553cb80581e6e6031b47f775fb3c2bede18e33a1803f25e0cf7eca127f3d205130e8194a55fba

  • SSDEEP

    3072:MGEIeLWnY8Ism+CE1UwI1tUh8MMtpDAyWHSq3BJW:NEI/nHCE1YtU+l7sfB

  Score

  10^/10

  agenttesladiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Agenttesla family

    agenttesla

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1

• • Target

    A REQUESTFORVALIDBANKACCOUNTDETAIL/tedutil.dll

  • Size

    14.2MB

  • MD5

    9c47a4a0c221ec9de3c6171c800598cd

  • SHA1

    704c442d6a4ec93dbc20845437bf59ebaaef330f

  • SHA256

    84c11acd0312818f87dc805317df96f390498f346da4f3b1b770c9781f202692

  • SHA512

    bf6f3349cb5d073f7770c872c9d104343001f27bb797403aeb54bf0d4c27553528575e057fe7dd54f1e2e0dbf4191727e4b42cd7bab522c8baa0715dc4c474d8

  • SSDEEP

    196608:/k4+5bsXIn+wQMZZzC+qOaA37R0NA8Z8CGON9nb:/k55gXI+cZW+yNABI9

  Score

  10^/10

  agenttesladiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Agenttesla family

    agenttesla

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral2behavioral3