1726170427668618960c4000908de2329a5fa514b5577035513c21b3b8b4277dc07f93cdfa797.dat-decod

Classification: Malicious

1726170427668618960c4000908de2329a5fa514b5577035513c21b3b8b4277dc07f93cdfa797.dat-decod is a malicious file sample (Windows executable, 65.5 KB).

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 1 DNS requests

MITRE ATT&CK associations

Malware families: AGENT TESLA (S0331)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2024-09-12 20:00:03 2026-08-23 18:45:03 malicious-activity
Agent Tesla ThreatFox Abuse.ch 2024-09-13 00:22:34 2024-09-15 00:19:33 S0331 Agent Tesla
Generic.Malware MalwareBazaar Abuse.ch 2024-09-12 19:47:10 2024-09-12 19:47:10 malicious-activity

Tags

win.agent_tesla agentesla agenttesla negasteal

Sample information

Filenames
45ba5f7c168cfa2a68d8f8d448ee037d35fca5dbb7e9d4deb55f8e0ba97ceacb, 1726170427668618960c4000908de2329a5fa514b5577035513c21b3b8b4277dc07f93cdfa797.dat-decod, 1726170427668618960c4000908de2329a5fa514b5577035513c21b3b8b4277dc07f93cdfa797.dat-decoded
File type
PE32 executable (GUI) Intel 80386 Mono/.Net assemb ...
Size
67072 bytes
MD5
1b05b62bf3dde1043a12ed5dbb519d74
SHA-1
5f690e12bb84951bdf0a0d3b8c146ec5dd9733e8
SHA-256
45ba5f7c168cfa2a68d8f8d448ee037d35fca5dbb7e9d4deb55f8e0ba97ceacb
First indexed
2024-09-12 19:49:39
Last updated
2026-08-23 18:45:03

DNS requests

whatismyipaddressnow.co

Process list

NameCommand line
1726170427668618960c4000908de2329a5fa514b5577035513c21b3b8b4277dc07f93cdfa797.dat-decod.exe