Extracted

• • Target
    Consignment Details.exe
  • Size 663KB
  • SHA256 71129ed66ff17356ade65197b3b871fc7d5d0de5040bfcaea7bebd2f16e2a9d7
  • MD5 4de550de5a2cf5e4290562a2f0bb69de
  • SHA1 12b291a76a2ac0460c1c271e0ce3a1a098848126
  • SHA512 2aea6c441f7cacddbb2343176eebd1061cbedc178f027c6b396e2227bcc7f166a3a05a46ece59d92e9143920c7d7d7a9cac45f2c66da60c5b7674a2b26dcaacc
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2