Extracted

• • Target
    Payment Advice.exe
  • Size 827KB
  • SHA256 528f29b705ad29a6e607a93fe7f16ddd4725f19f0e9d32cbc505f14d20a52787
  • MD5 6846e1d5a6d02a9b967ca1bd18ef6ba8
  • SHA1 7d645454a187ba2914e5cab6bb83db0a20615fa5
  • SHA512 53696492fe9a25d7f07e208b489c14235b1180e830282ab52da54ced3322b78c6ae10025404965f271c902669545fd1df4e226652e72670330dcf98bf992ae6f
  • MD5 SHA1 SHA512

  Score

  10^/10

  spywarekeyloggertrojanstealeragenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2