AgentTesla PE Executable malware analysis – 9d299f21da4e

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

File

Type

Portable Executable file

Detection

Symbol obfuscation

Very high

2 malicious · 84 files

EXE9d299f21da4e8899459d0e42fa25bc22AgentTesla

Structure

BINResources

BIN.Net Resources

BINSIPPIN2CARTI2FISTSIPPIN2CARTI2FIST.細くリる新ン七キ薄ケ好ノツホ遅.SIPPIN2CARTI2FISTSIPPIN2CARTI2FIST.月へな美をセ好ヌアれろしフ五ハナ.resources

BINSIPPIN2CARTI2FISTSIPPIN2CARTI2FIST.りりネ中なスケソさ短悪ネオく薄し強中.SIPPIN2CARTI2FISTSIPPIN2CARTI2FIST.へてハもねそヌうらヤや円年つえ九月醜年ミソの.resources

BINSIPPIN2CARTI2FISTSIPPIN2CARTI2FIST.ヒは一せるむ五薄薄ろけ日ヨコユロえアニむ醜フニ中.SIPPIN2CARTI2FISTSIPPIN2CARTI2FIST.サエら十となセヌ短つホともつコオコスワ厚.resources

BINcostura.costura.dll.compressed

DLLcostura.costura.dll

BINcostura.costura.pdb.compressed

PDBcostura.costura.pdb

BINcostura.guna.ui2.dll.compressed

DLLcostura.guna.ui2.dllAgentTesla

Structure

P7B[Authenticode]_28203e69.p7b

BINResources

BIN.Net Resources

BINcostura.newtonsoft.json.dll.compressed

DLLcostura.newtonsoft.json.dll

BINcostura.metadata

DLLXVM.Runtime.dll

Name	Value
Module Name	FrameworkUI.exe
Full Name	FrameworkUI.exe
EntryPoint	`System.Void SIPPIN2CARTI2FISTSIPPIN2CARTI2FIST.薄マエレ高も悪クホり.SIPPIN2CARTI2FISTSIPPIN2CARTI2FIST.美うシな小ニ遅フくかへん月多チんエメえしむ::SIPPIN2CARTI2FISTSIPPIN2CARTI2FIST.ね十すニエくわクイ強秒ツて軽ヒせさオに強太すネは()`
Scope Name	FrameworkUI.exe
Scope Type	ModuleDef
Kind	Console
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	FrameworkUI
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.8
Total Strings	10
Main Method	`System.Void SIPPIN2CARTI2FISTSIPPIN2CARTI2FIST.薄マエレ高も悪クホり.SIPPIN2CARTI2FISTSIPPIN2CARTI2FIST.美うシな小ニ遅フくかへん月多チんエメえしむ::SIPPIN2CARTI2FISTSIPPIN2CARTI2FIST.ね十すニエくわクイ強秒ツて軽ヒせさオに強太すネは()`
Main IL Instruction Count	0
Main IL	—