Extracted

Extracted

• • Target
    Consignment Details_PDF.exe
  • Size 932KB
  • SHA256 87fd751ffdf45ad010725ae8b6e293a7be22cdbd8eb2acfca4f6436ab991e939
  • MD5 57a51dea1ce3241a83db6a676a6f3bcc
  • SHA1 99664f9547892e17d5e6be17b4c8b5439ab49c4d
  • SHA512 88996a8631b79600954a74a27e3db190e312411efa30f4aac011a841155dd4107d56fa4e3002a268594a78f2636fb4c564b6064d09e2365b096a01d914a7f8db
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2