Extracted

• • Target

    Order152020.exe

  • Size

    439KB

  • MD5

    bdad7cf32c55233a29a52feba81f140e

  • SHA1

    464219a09f61e119e532fbacba58259ee7b06299

  • SHA256

    7341780b5a914f5cf26fee6fecfa59380432fe6da8ad4aeb5bc9e83836991b1a

  • SHA512

    32a56224e62319eeaa1f2467a8f502ee0b764912c55a24d1cc114f7dbc8ec9a7738eb737c362e641e3eb1b4988332d49b3b81ea981507a24cfc07f44296f6c73

  Score

  10^/10

  agentteslakeyloggerpersistencespywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2