Extracted

• • Target
    riveduto elenco documenti cd 2.exe
  • Size 809KB
  • SHA256 cdc3ec36fc39d013df0568b47e34265acb3da05cc313685edda8c0609ba7d325
  • MD5 0f0a6dfd0e8d01e19e759ded54704696
  • SHA1 d0686f19f043c2b2698ec3f54428abcd1dd3d504
  • SHA512 58514348ac4b1e2aa37c41267082cc91c9ec333e6e2d80d66a1487b91a9016b00865d859aa051f6e75f9fd086184c916febe142ae9bf911ee9d92fb8dbd85f6f
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2