Joe Sandbox Cloud Basic
Register Login
sloganpng
flash

mal5.exe

Status: finished
Submission Time: 08.04.2021 12:24:28
Malicious
Trojan
Spyware
Evader
AgentTesla

Comments

Tags

Details

  • Analysis ID:
    383921
  • API (Web) ID:
    669944
  • Analysis Started:
    08.04.2021 12:29:27
  • Analysis Finished:
    08.04.2021 12:37:36
  • MD5:
    082b50aa4a4ccaea6b415de2e968ad47
  • SHA1:
    d6fb2b9d96280dd812325fe8338f646dd918cfdb
  • SHA256:
    6ed8f5c23004500f4125edd751c5129935bb62a182d5922b1108fb618bf45961
  • Technologies:
Full Report Management Report IOC Report Engine Info Verdict Score Reports

System: Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211

malicious
96/100

malicious
22/69

IPs

IP Country Detection
74.208.5.15
 United States

Domains

Name IP Detection
smtp.mail.com
 74.208.5.15

URLs

Name Detection
https://www.theonionrouter.com/dist.torproject.org/torbrowser/9.5.3/tor-win32-0.4.3.6.zip

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Temp\627zxnx9ige
 data
 #
C:\Users\user\AppData\Local\Temp\nsaC339.tmp\2zz1gp0k.dll
 PE32 executable (DLL) (console) Intel 80386, for MS Windows
 #
C:\Users\user\AppData\Local\Temp\x1y8d3vne767i3k
 data
 #