Extracted

• • Target
    igfx.exe
  • Size 589KB
  • SHA256 cb8cf6b203f27f3b42020653f940d2be826893d079035eac52d4d64e1102aa29
  • MD5 7686b5b1e65a327d684e1a76beca565c
  • SHA1 4233822c7166f0f89bbc58d661b8bd40ee863a78
  • SHA512 ff788a6598c8ac530d365102fa27ef1066e90c236fc58a6a16cd9eec211dc8161a157c705611a78ab4a5da2aadbdb83bcca65479f81b1d0956d9d5fbb8367a99
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerpersistencespywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Adds Run key to start application

    persistence
  behavioral1behavioral2