Extracted

• • Target
    13 W04-BOD01 MOLC.exe
  • Size 427KB
  • SHA256 4e4023f2d5ba6bf0595fb6dcac7c04564239d0ff25408a1aa9c36e1d08ae57e5
  • MD5 67ff3ce03d6bb09047d02c37056f45a8
  • SHA1 764e1d26042af6ae20e4cb436a5c6d73894c6e56
  • SHA512 4b4062cd9251f7c785ffaefaf9aca21fcc56c50848a29a7411b6a9dc164263834c6efbe2276992e25a00d7585d1c88c9eb23f45d21420948b1c3cc3f490c3c85
  • MD5 SHA1 SHA512

  Score

  10^/10

  keyloggerstealertrojanspywareagenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

    keyloggerstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2