Extracted

• • Target
    FACTURA_FISCALA-RO81061402-6403840980PDF.exe
  • Size 1.1MB
  • SHA256 98c7f4edb36e0d90ebd8d9aa17a5ac6f29003ed677464bdc05b19b2f17bc62ca
  • MD5 71ab275be47c8b8627b92a1b966c337e
  • SHA1 06a4eeb8d76b698a2907c63a9f950fb52ce67296
  • SHA512 8eda3a2c3e3569d2ad8b0cea0902eca2a9d506c9ecd5127ac3cee750fbb101a133ec30130b54a19d90b8a2db46add93e98cdfaf5d9e820d1d0aca579d6dd1ae6
  • MD5 SHA1 SHA512

  Score

  10^/10

  keyloggerstealertrojanspywareagenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

    keyloggerstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2