Extracted

• • Target
    shipping Documents.exe
  • Size 403KB
  • SHA256 edc0c4b6e59c6ace0fa712c35715fc2d9cb2b0167c175e515bd971b3a52e530b
  • MD5 3d8a257d88d5942edddd4f1da97a7cf7
  • SHA1 2483926aa04c44dbcf262ad44b8965e510d7713e
  • SHA512 51726baf4e75c0f2455f955a4db69fea963e580baa8dd169bb4c41120d542d04b3733a9fe27c7dca8f01c636fc16be44ca4cb1db3789b63fb9fb0956dd2a252c
  • MD5 SHA1 SHA512

  Score

  10^/10

  spywarekeyloggertrojanstealeragenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2