Extracted

• • Target
    jlZt0Dt5j3Vs8Zk.exe
  • Size 832KB
  • SHA256 275559f7e9052564ecacedb07b93ea0e552fe3cf4d5b3bbf315e1494efd712e2
  • MD5 b8b01f6daa3ea76452ee1fd8d1d3338e
  • SHA1 33d942dbc95f852700add066c8fd2256d6cd614a
  • SHA512 944e92ae64585f64d47d4076d5075c1f773c5f03bc80eec702bff28288b063a85eeed28f36295e713dbbaa7fc1be1050cd27f853b8312e0a19a1a506349fc396
  • MD5 SHA1 SHA512

  Score

  10^/10

  keyloggerstealerspywaretrojanagenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

    keyloggerstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2