Extracted

• • Target
    Remittance Advice.exe
  • Size 585KB
  • SHA256 7aa9dabbf167e61e1c5b34d23a527daf5aa5981d059b48a6a654cc3d86f2e916
  • MD5 b3e8431291e6bca9ae08c032b07ff2aa
  • SHA1 a7986ce56bc239b5a49dfa21bb6df2ff3c8590f0
  • SHA512 ac738e2e1f9e124d7f2591c95b12aa0a3448717c6731f3fad2cb7628fcbfad12fbb42a214347b7b64775aabbd0bc6a8aeaacb989612e70c096e2b869dfe2dfa6
  • MD5 SHA1 SHA512

  Score

  10^/10

  spywarekeyloggertrojanstealeragenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2