Extracted

Extracted

• • Target
    f16b1132787a89918e6a41cd23caea200a97b4ceed89eef555f00d43c4ecf808.exe
  • Size 65KB
  • SHA256 f16b1132787a89918e6a41cd23caea200a97b4ceed89eef555f00d43c4ecf808
  • MD5 dab66a82f2bd4a77ed52c048634b8615
  • SHA1 b277428e4adc3d9b2e58477e7093b8c078739d66
  • SHA512 cf53aabd8932fd645bfce8b18f59d49175c5f7060f57f223593b617883bf6ddc91f2e40ed94c9331b47588ee88ce3795adbe6cdc1eac82f680a98cf0c28b33cc
  • SSDEEP 768:4mreqKm+tiCX7oBurIPvVz5hyLNKhpbrfOTtJ3LjtbLJeN1OR+Oi+hArILtH1l0t:4N2Ru01wEhpeTtxnRVgOR+OXT5VlQ
  • TLSH
    T14A637C0DBBC49B31D6EF877DB87249061571E26B5A03D78A4CC460B90B337D48B697E2
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  collectionagentteslakeyloggerspywarestealertrojan

  • Family: AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2