Extracted

Extracted

• • Target
    fe3e2114d24a0409a7b58e97a67c9da775fef6bc736e26f5a3ddaab131b090a3.exe
  • Size 239KB
  • SHA256 fe3e2114d24a0409a7b58e97a67c9da775fef6bc736e26f5a3ddaab131b090a3
  • MD5 70ccc55374a58a7513304ffafa37db6e
  • SHA1 dd6d0514ba78dbf7e39288b14a9fa36338ca76d3
  • SHA512 4ef7364b74f65e1dc22a22c46891e6aa44671180e2259dc6141c8b9fe1418ef2e625ec9e170ace6023c3cf5969a941d8634afad50404c176b29a13fe11c6b451
  • SSDEEP 3072:mabqayiqH2zSyo+AskmTHo9rG8KaG5jnTh3SYufzz:xqayiqWm1Isq8KaWT1
  • TLSH
    T1D63400027F88E715E1A93E3782EF6C2453B2B4C71733C60BAF49AB5514516826C7E72D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  collectiondiscoveryagentteslakeyloggerspywarestealertrojan

  • Family: AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2