Extracted

Extracted

• • Target
    Scan Doc.exe
  • Size 743KB
  • SHA256 a550ba5d41e52b9e136cafbfcdfe92148a0111a0e75a5ec3073ddbc0d965de55
  • MD5 17f31efed6caa49a349e12190a3e5efa
  • SHA1 02c0c49b5928de754fc9411b8b4954856fac14a8
  • SHA512 4f30f8331c7264f1c9652d6a2a00dcc6b66bd760f130fb7d86be37d3569823bc45a881c5ebb32a4117018eb792143966b43a497656b375e573bf15b576324817
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojanupx

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2