Extracted

• • Target
    Att.2 PROJECT SPECIFICATION..exe
  • Size 431KB
  • SHA256 f59c1bb4e7ae935dbc9f3cf07c62d90f7e7396e7d7efbf35b81dcd442226c8e3
  • MD5 315f6dd2738e1be092e66201866753bb
  • SHA1 963d164edee4eee24d6c862c2c948c41ee91bda9
  • SHA512 f0bf98b6a468c67518e8fa1d2b87ad35d391d4711b049f6078efca8b4c86bd9183e0028f9f5aacc761a7187ebf0a1d50035848ac6a2bd845486aec53baebdbc1
  • MD5 SHA1 SHA512

  Score

  10^/10

  spywarekeyloggertrojanstealeragentteslapersistence

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run entry to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2