Extracted

• • Target
    Document4757845845502135324062020_scanned from a xerox work centre 003.exe
  • Size 1.0MB
  • SHA256 48ab2fd83cd1fc8b44e24f7e765521fb52fafa319f11ec89da4f05713990d0bd
  • MD5 b6ca1885260050f8a268b4bd066d6d9d
  • SHA1 0b36cf3f38fe288b95690586b401d39c75b3c5df
  • SHA512 79ccff78b38d10f532e8e74ce93f41481679d161b2de28c2925a7dc02847ea43200be80153c89c6d12f054d6b607dced5cb9ca82692098fcfefc9b481fbbf5ef
  • MD5 SHA1 SHA512

  Score

  10^/10

  spywarekeyloggertrojanstealeragenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2