Extracted

• • Target
    Scan copy.exe
  • Size 713KB
  • SHA256 367d1fd29045416d80d3b22efd7b0684601c184ea06cbeffad5b4562fcee0533
  • MD5 b37a3016b2fb1df22add405547e396ce
  • SHA1 847d2b7aed218dca73e1664db8c6280d72aa355d
  • SHA512 a223073e384ced1f69325571093975b6eab290d3ae553fb9b4a6d440951dd3671697d16e5904063b6aa4f82f33f497de873420f3b08d7371b860717841af5af4
  • MD5 SHA1 SHA512

  Score

  10^/10

  upxkeyloggerstealerspywaretrojanagenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

    keyloggerstealer

  • Drops file in Drivers directory

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2