Extracted

• • Target
    EN 10204.3.2-NACE-MR0175 fittings.exe
  • Size 709KB
  • SHA256 d720d5e55684cbf894809d5963e95d6613af588bfaeb0ecfa6001beb533d0232
  • MD5 69aa062631b0f34457946caab856ca36
  • SHA1 d400059530e14fae4642538a7a44a77a4a69ae24
  • SHA512 44140d4e24a1d2ff66e056abe6eecf0f667c7786414566103bda3b9cec66ae3023c2c51e2aa7dfe770db181985b5ceee491173cbf74b9fff525576153501304c
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2