Extracted

• • Target
    files.exe
  • Size 844KB
  • SHA256 1328e0030337b326a962b3369cc8dd2b474de98267e8e9fdc3684f4e5ecb9984
  • MD5 849f42939d0cca11d5e9e67cdcb117ba
  • SHA1 7ffb8508c2e2523d4a07ec20cb7cc454d00feaf5
  • SHA512 7704c7b3005b1558ebb3672e2cbcd97832006e4b32f91b244fbc2c18b617bda8a45f364522dd20d21c29a86f7f75f712ca7ec6c11a094f363c67b36e6546eec8
  • MD5 SHA1 SHA512

  Score

  10^/10

  upxkeyloggerstealerspywaretrojanagenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

    keyloggerstealer

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2