Extracted

Extracted

• • Target
    Proforma Invoice.exe
  • Size 740KB
  • SHA256 b3b1f3479b7d0033e21ef89ccea063a0281604d4472252cf590ec99be5aa2eb4
  • MD5 7aed8d355a7d3c46117bd070425349d2
  • SHA1 8939c73029843320236abcd14becfe27b67a4ef8
  • SHA512 09554c8d75a67cf94f1547bf6a91e061517ebd31c5bc9e2606a1b62aadc5a43813c61f1870fcfb7f2969134b6faad3876efc568797186d3e161a1c1133bfbfe8
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2