Extracted

• • Target
    Orden de Compra #972020.exe
  • Size 392KB
  • SHA256 3a646d051e183a55d297b684e6f74bc95ab57846c8ffde301338a5b60f8ed7c7
  • MD5 5048b25921a0da530b45c01906eb5eed
  • SHA1 06ededc3d1f09a9201b810cc0ed61ced8efd4ed2
  • SHA512 4e56752116573f9c208d4d77f43b7fc628010d3958d264bc6ebe9a298a3d9d60ce2d8c10378f900a437159e3121b5927478e0ebd46b4feb4738dcd0dad0f52fc
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2