Extracted

• • Target
    edf94facc2362e9cb214cda268f26d6e.exe
  • Size 755KB
  • SHA256 5aa103d5ff6945f3894cf993ce0a7acaa28624234a5b249efa72748a50b2aba7
  • MD5 edf94facc2362e9cb214cda268f26d6e
  • SHA1 2453816c66b45246d0447d858fb4a7499d91b668
  • SHA512 66df2cc2f6e7b4b61d3b2bd488d18f66d0fcf8a47861448becbcf7f7187928201c53a1a5501ba841c8356a142288b9a1954e222a6389f5bc915b5c02599ebb0b
  • MD5 SHA1 SHA512

  Score

  10^/10

  keyloggerstealerspywaretrojanagenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

    keyloggerstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2