Extracted

• • Target
    DOC 98450005996 SCANPDF.exe
  • Size 793KB
  • SHA256 409f59c1740922e313e2844cf57dc14941f747be52e7d69a1ec2277e2700f88a
  • MD5 676fce494b5e4b908a19481ca6af7fcf
  • SHA1 af8f147ce7cabc525009d20df6e8ac73bcbe963b
  • SHA512 520d7ba55d61fe602fef4dd1aac952843322f45597649f03799d74ceffa1e573ab03f7376723142dbfe86e8e35a83be3964d16bf3ca51df89578436847d62736
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2