Extracted

• • Target

    Scan-Copy.exe

  • Size

    409KB

  • MD5

    a0c68f83eab0c7fc892546501c4b7a82

  • SHA1

    51e71bfb9b19c00b188c6c549f6180ed1639940d

  • SHA256

    078acd1810907a12e002129c343b0c0a73f3e62de1b6eb3020942fca6fe2aee4

  • SHA512

    20b4d715f8892ca2ef2704c3172262cbd9b58ec83e8ff79053a7dc503b231a01e38c57feda3f3f4a53770d86f6cbce24b1cdd69ea3d52cdcbc26e554d3897ce9

  Score

  10^/10

  keyloggertrojanstealerspywareagenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2