Extracted

• • Target
    9837100021.exe
  • Size 673KB
  • SHA256 50926a9216bcaa109ca6434bfe263dde7e6554c47f1771a3a0da30a0a809de6c
  • MD5 d9f9f6d2f813f0f535468a72e5491071
  • SHA1 0bcb66dd85e22a59b03fea6b4268e6dc9ac4fb4c
  • SHA512 8b3760658b2af8a3f6c8700759a9c259da5d0b3e9dc30e83ece6fb4bf40f17ef8f53f73b8fc16a4c0163621cb5aa7989344f63a77962bbf8f7eb8b27cc2718b8
  • MD5 SHA1 SHA512

  Score

  10^/10

  upxspywarekeyloggertrojanstealeragenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2