Extracted

• • Target
    Products List - #20201019.exe
  • Size 1.5MB
  • SHA256 c327e8c358bf3cdb8a0d7b76513eec318f7fc652c286693f5f71ca285fec1a8c
  • MD5 ceea69016efa57a5ab6fb9ef103f8d0d
  • SHA1 7ce83b2685520c589c6c97c08cf7840249f77ba5
  • SHA512 595ba6d8da5c7483ec1d1bf2c4a628ad9ac9fd9d0eff2ae1060ffdd554752ea22b841bc1d600af6208f6560c581abc844fa9bc6121b8f3794a01602be96ef73d
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2