Extracted

Extracted

• • Target
    MT.OCEAN STAR.exe
  • Size 689KB
  • SHA256 d8450acc64ddba18cda3926697f2953a4bc632607bb975a31c8dbeaa882765d0
  • MD5 09f162f3bea5f26df591719da34c95e0
  • SHA1 e5eef5844787e636a67dbb4b9a824f1cda459705
  • SHA512 eb386d604f9902a3dca50849b6d82dd553a36a1f2a455a47e2d8b834b76053006939f4519f8220d675681ade67fcd66232a56f59be1e38a6d73fc3b1b883c91e
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2