Extracted

• • Target

    SecuriteInfo.com.MSIL.Kryptik.WOX.31681

  • Size

    341KB

  • MD5

    2eb615a83afed8792190b04dea641217

  • SHA1

    6e03c83fc468980003d8b6cc9a2690052c8fbe2e

  • SHA256

    353ae3fcced86a2ae12f8b249900180eeeffb722a2c56b46356c8f4ec4461925

  • SHA512

    c36342924abff2f84ebb44ce4aa8b24ef4015a315cd6040a330deb23ed904158bed741bdab5769fc13906a1c0a65ac00cd8ae035a4a6d0a3513d79af971af557

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2