Extracted

Extracted

• • Target
    Transfer Invoice's .bat
  • Size 429KB
  • SHA256 e1edaeafb526cd694a3f293cf47ad4bdb832cc0c6d697a1f386d0f9b63dcd152
  • MD5 0fff5b73038ac38162236a9d1545a3d3
  • SHA1 38bdb5b9f1098aaab60f77792eddf1acebd8b63d
  • SHA512 4751d9307abfde72cf49c20f87930d4edd904b48c6376ba052f119cdc52bcd51a4ac4aee99e84ee2809532bc539c0f56d1157d23e396c19fc03ff9ff50435ea2
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2