Extracted

• • Target
    SecuriteInfo.com.ArtemisTrojan.28357
  • Size 1.7MB
  • SHA256 5bb6635fa15b305bd50cb008387377cd1eaaee96eca6d7af194c522b6a9aa283
  • MD5 4c03747616d4a66c4ff196a20a88140f
  • SHA1 1a093505564ed261c300c2b89f2d48c271cddc6a
  • SHA512 d7386e3aae67f12a3b82ffb2e2581808086c1b81d5d1e34693e51729dcfa554fe97ea8d7182871038a6a7ea20b4b2e1cdcdff4e97eaf77c7ac37221a04733ebe
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2