Extracted

Extracted

• • Target
    Pdf-1790098475756783844-022349.exe
  • Size 536KB
  • SHA256 b04580b535d7a018ff5b8933e399b7b1497b3dfa896798fef656412a925ceb78
  • MD5 0febb8e8fefe6d08dadbe30e8a552ec1
  • SHA1 516f9446d4fca65657769b41ca0b0c33e2a97a42
  • SHA512 23814015cf78157fda8ddd815d5a09b7530c2ddea140258afd11b60fb71703a50f9d50c430125233d7617c71afa126adb6d40a812f575df554739488765c63d9
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2