Extracted

• • Target
    [LUM CHANG, SINGAPORE], INVITATION TO TENDER FOR NORTH-SOUTH CORRIDOR PROJECT, SINGAPORE.exe
  • Size 494KB
  • SHA256 3be0077c6f64fbd2d0e432bc48a369f17242ba95e26c36bde1ef5c7cc4940b05
  • MD5 44a0c63660758203b1a004db121945bd
  • SHA1 60788c633bfe48ce696ae143cf23c85c40c242cf
  • SHA512 996b01c544b04835cf9a36eb7d077b025f248a4ca1fa38db94666cd2ec264827bca0da4760994872918f3fbb3f040aef4cee486014084b7e287b2e133b942f58
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2