Extracted

• • Target
    Shipping Document PL&BL Draft.exe
  • Size 596KB
  • SHA256 1d7bd4569c9c65e200191f37c4880af45b409a145ad9e883cd6699f76bcd5262
  • MD5 5188e1dd3f907aab4e32bdac0be05e0a
  • SHA1 7161f4136aeecb0a8a2b53ab4256cb9527824706
  • SHA512 7a1d5bbd2e080424ede34e695e4807b2994641c5558b889bfc503c71a90a18a9517da93e5195e44a031c03a00a4f5dde1565157d7ab9f84b886bb505251857fa
  • MD5 SHA1 SHA512

  Score

  10^/10

  keyloggerstealerspywaretrojanagenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

    keyloggerstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2