Extracted

• • Target
    Shipping Documents.exe
  • Size 717KB
  • SHA256 a73001ed7b9dc01b0d7041125e3c72edfd7b55a511b2681063ad28ea1bf9c014
  • MD5 3ed97ab54e82d79c913d75d3e9544146
  • SHA1 d9780c634a918fc939393e639f065c22c5768695
  • SHA512 b6855c134ff1fc16788f189fe7486f1b385703b0a78c250d5fb02ff64f8ac6b1a5bc87a2448d12aab86fd58d0f42cb46061a90b339ef11273903fbc59c896a83
  • MD5 SHA1 SHA512

  Score

  10^/10

  spywarekeyloggertrojanstealeragenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2