Extracted

• • Target
    Scan92761.exe
  • Size 498KB
  • SHA256 eb09747d42fcf03baf1c3d844ac469062b354defcdd6300a8c051c96b3d144c3
  • MD5 cad635f168d3fefb032fa2fdd80e8ca9
  • SHA1 ec8be76c39b773b2bb7530971a2e0979d9b04e3a
  • SHA512 c5e477822fca6d1a5452ca8abbe4daee674c4e279ed841d53a34966bc9611439558f6cfee6865aac8ac70602dad5aefbc329fbb0af3ad31e3fe282c0dc7506f8
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2