Extracted

• • Target
    4543-7875-642.exe
  • Size 888KB
  • SHA256 a2a8e595abb9d14bf0a84f49b0f81725925b19f14f0b06da5ab01b6eb4b9e7e9
  • MD5 5dddba03976adec5181a7611a172fcde
  • SHA1 ee4a200ce9d0d5a7f8eadcccf47c065afed399de
  • SHA512 1eac187fe58daa7b7135bcd78c1daee884bb14709b4594bab501b8f2170b315abe295c1f57381044986e549da2f3f3226add9608fb2a0be6e6e7265936faa3fd
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2