Extracted

Extracted

• • Target
    MV ULTRA TBN.exe
  • Size 680KB
  • SHA256 28c522239124483bcc83ca08cd0cbb3af1a9a3e18a1d8648e958c153c8e9e110
  • MD5 2a39d9260dcb26bd8f05084f8fc2b2cc
  • SHA1 7abf88f5ee537c434c85235fa9ddb2a1b24bc2af
  • SHA512 dd48ce4de47c47a011eb53f99c6d71f9489e94836427e5fbdaa759557afe9b87e79dbc4cb094b5877011ffd5650f4d526ab54b0c4e5db069b8bb72b025a31ed7
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2