top title background image
flash

file.exe

Status: finished
Submission Time: 2023-03-20 19:31:11 +01:00
Malicious
Trojan
Spyware
Evader
AgentTesla

Comments

Tags

  • exe

Details

  • Analysis ID:
    830908
  • API (Web) ID:
    1198003
  • Analysis Started:
    2023-03-20 19:42:10 +01:00
  • Analysis Finished:
    2023-03-20 19:51:40 +01:00
  • MD5:
    856572778608242656795bd15cc3683c
  • SHA1:
    ef79e01019b9518fa82e8dc628d416cd9ccd7817
  • SHA256:
    be316d90b0e5c1f88f32fa6dc7cf5b2c760c8ea63e7ddec3e2303cccf8ae25f9
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
malicious
Score: 100
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 33/69
malicious
Score: 19/39

IPs

IP Country Detection
208.91.199.224
United States

Domains

Name IP Detection
us2.smtp.mailhostbox.com
208.91.199.224

URLs

Name Detection
http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt0#
http://ocsp.sectigo.com0A
https://sectigo.com/CPS0
Click to see the 4 hidden entries
http://nsis.sf.net/NSIS_ErrorError
http://us2.smtp.mailhostbox.com
http://crt.sectigo?
http://crl.usertru

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Temp\zjlxnt.exe
PE32 executable (console) Intel 80386, for MS Windows
#
C:\Users\user\AppData\Local\Temp\anaictjg.cte
data
#
C:\Users\user\AppData\Local\Temp\nsi8BD7.tmp
data
#
Click to see the 1 hidden entries
C:\Users\user\AppData\Local\Temp\pqknsgems.bq
data
#