Extracted

Extracted

• • Target
    MV. DARANEE NAREE.exe
  • Size 611KB
  • SHA256 ff0b6df1ebbe0c832da7869563f4ffd729fdc190e620347ac93b5d2cf31896ae
  • MD5 faccc453881fd12741db76c5c36cb75e
  • SHA1 1a446d0173e4012c7a43043c0ff1c88cecc8036d
  • SHA512 0f58b115702752a9a4a2a84ba0a8567b6dd9064c4727ae9aff516ecdcb87d22fe3f78781b97c6c4ba71515f5524d862967796fdc4376929b8f581432195259e3
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2