Extracted

• • Target
    new order.exe
  • Size 2.1MB
  • SHA256 cd54e4b043619a391ad6cd9fa99e7c22e8d7321d9a98d1fa3b7ea8526cb688ab
  • MD5 7f54bba34bd0168065bd7e04314f72e3
  • SHA1 fc99f99d84553f1d41cb755fd5fa50f221e1e2bf
  • SHA512 8626678651ca4de4d9572d79e73e4bf61ab77a58ae3d3131ef70daf0ceea09b76119553577478e96c727f21e4083eae808874306879b0e51f2665364a6f8ca3c
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerpersistencespywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2