Extracted

Extracted

• • Target
    Consignment Invoive PL&BL Draft.exe
  • Size 659KB
  • SHA256 aeeb75d3528fb9fe3ce0bae4a6c5a70b6e62255f6bf8e5eeab82c1a00efcc101
  • MD5 738b0808f5221ff0902caae84a19b1ca
  • SHA1 2cbc790af4b6c553bfdb31b405ba23cd66ddaa42
  • SHA512 a26f244b729075a3f69301a01a5b6dfc6e2d8dbf4941158d1b44e527a2d8a88fe09eaeac6c1d7f1c0b451497de04db9aebdd6f2c8e8d4edcae941ac3bb997657
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslaagilenetkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Obfuscated with Agile.Net obfuscator

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    agilenet

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2