Extracted

• • Target

    Scan-Copy.exe

  • Size

    548KB

  • MD5

    741ee869f4903cb123f7a80f4f7500b7

  • SHA1

    5314e91f1e25f7b4f12165a639a5882064416a28

  • SHA256

    95afea0b66c30beb827b20a6b3670a513ff46b14e87b85b52afc345152c29a3a

  • SHA512

    4c52d083e1baa497cdc87800d3fa1ec3f132c1d4602f4944bb4f1fee43d4f1ac9a7b4aa94c9ee3e21eae86ec9420ea1279dd0564bb8782a8d1c426816ea22795

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2