AgentTesla.v3 | 31941c96fa47

Classifications

Keylogger Injector Spyware

Threat Names

AgentTesla AgentTesla.v3

Dynamic Analysis Report

Created on 2022-05-04T13:14:09+00:00

31941c96fa470de35d08fd8bdc215c2ff2cbeb82dd72e91aafa563c08af7c969.exe

Windows Exe (x86-32)

Remarks (1/1)

Auto Reboot Triggered (0x02000004): The operating system was rebooted during the analysis because the sample installed a startup script, task or application for persistence.

General

1.94 KB total sent, 7.32 KB total received

2 ports: 443, 53

2 contacted IP addresses

2 URLs extracted

0 files downloaded

0 malicious hosts detected

DNS

62 Bytes sent, 78 Bytes received

1 queries for 1 domains

1 name server contacted

0 queries returned errors

HTTP/S

0 Bytes sent, 0 Bytes received

0 URLs, 0 contacted servers

1 sessions detected

Function Logfile

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting \"security.fileuri.strict_origin_policy\".

Before

After

WHOIS Domain Information

Screenshot

Domain Name
WHOIS Response