top title background image
flash

mal5.exe

Status: finished
Submission Time: 2021-04-08 12:24:28 +02:00
Malicious
Trojan
Spyware
Evader
AgentTesla

Comments

Tags

Details

  • Analysis ID:
    383921
  • API (Web) ID:
    669944
  • Analysis Started:
    2021-04-08 12:29:27 +02:00
  • Analysis Finished:
    2021-04-08 12:37:36 +02:00
  • MD5:
    082b50aa4a4ccaea6b415de2e968ad47
  • SHA1:
    d6fb2b9d96280dd812325fe8338f646dd918cfdb
  • SHA256:
    6ed8f5c23004500f4125edd751c5129935bb62a182d5922b1108fb618bf45961
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 96
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 22/69

IPs

IP Country Detection
74.208.5.15
United States

Domains

Name IP Detection
smtp.mail.com
74.208.5.15

URLs

Name Detection
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Temp\627zxnx9ige
data
#
C:\Users\user\AppData\Local\Temp\nsaC339.tmp\2zz1gp0k.dll
PE32 executable (DLL) (console) Intel 80386, for MS Windows
#
C:\Users\user\AppData\Local\Temp\x1y8d3vne767i3k
data
#