Extracted

• • Target
    Copia de pago Ref __ No.08172020 __0936_escanear.exe
  • Size 602KB
  • SHA256 88ca3229bbbcdfa0efd9ba8533253fc7cb11206b266d0bcdde54e2c10ac87e35
  • MD5 d24b6d2efbe4b75e94b5365abda67abd
  • SHA1 572c6931a665fb724e8e57c2d3727f11a59db08e
  • SHA512 0ed5a435d39349e804ef8b1268746aa081c654d4c091bf762b85317b68e6aeb25bc70141b906ca5b84e4c592b769d1a2197889c07bad25bd1c830af71ecfbe6d
  • MD5 SHA1 SHA512

  Score

  10^/10

  keyloggerstealerspywaretrojanagenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

    keyloggerstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2