Extracted

• • Target

    Shipping Details 00459010265 - 07.07.2020.exe

  • Size

    719KB

  • MD5

    ec25c93cf619cf346cbb955af0518baf

  • SHA1

    6a72eb049453cc1aa268f424eb03fa4b466bcfea

  • SHA256

    ad2da1fa0e285bd992c7dc1d0dcad3f5a476bd62478ebf958326302942fabeec

  • SHA512

    52886dbab173286145b16e61a45051ca8a79bf94ed317e7f35047552c2ce47f51610f46e22b19b8dafa748f0c7c6974bbbd22e059ce28578810837540bb96df8

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2