Extracted

• • Target
    payment slip ..exe
  • Size 580KB
  • SHA256 40f62edaaf245e669c4c4de028657d8762862124d810e9f71184e0dc5ca23df2
  • MD5 9b47246feeea57e036332ce0a59fe316
  • SHA1 6ff968f1287b499926518605d1d4e3405a5d577e
  • SHA512 ab95804b3f67590a4edb3a926a8832a3036e48092ca01c3b7def4e2111b481ea6257240dbc08ef5cb4bc84650a784f3a2f09ac66f5033dd5d4ed400d9be10e44
  • MD5 SHA1 SHA512

  Score

  10^/10

  keyloggerstealerspywaretrojanagenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

    keyloggerstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2