AgentTesla.v4 | 1c27a36f0991

Classifications

Injector Spyware Keylogger

Threat Names

AgentTesla AgentTesla.v4 Mal/Generic-S

Dynamic Analysis Report

Created on 2024-01-25T04:25:32+00:00

bc2b81ee5871a2af529ba6d695e656c6.exe

Windows Exe (x86-32)

Remarks (1/1)

Auto Reboot Triggered (0x02000004): The operating system was rebooted during the analysis because the sample installed a startup script, task or application for persistence.

General

9.38 KB total sent, 28.69 KB total received

4 ports: 53, 443, 587, 445

3 contacted IP addresses

1 URLs extracted

1 files downloaded

0 malicious hosts detected

DNS

122 Bytes sent, 205 Bytes received

2 queries for 2 domains

1 name server contacted

0 queries returned errors

HTTP/S

899 Bytes sent, 6.75 KB received

1 URLs, 1 contacted servers

1 sessions detected

Function Logfile

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting \"security.fileuri.strict_origin_policy\".

Before

After

WHOIS Domain Information

Screenshot

Domain Name
WHOIS Response