Extracted

• • Target

    2500060474-SERVICE AND CALIBRATION OF MTS TENSILE TESTER.exe

  • Size

    1.2MB

  • MD5

    f6131d72d8cc78020f75afe200c3a779

  • SHA1

    66d370d6b53570c9d15aacf34f108c9090e72035

  • SHA256

    dd87c0128b103686db970e51b488a52acc20d8c55a3159e3e3c8bf15a6cb9e24

  • SHA512

    b2e3d53fcaa97c28424426541372e7263973aceac1dd33f9b47518ac6cb033d76b2eb0fdcdaeeba1a2a8e09816e262e21e2e50f9d447f815c48f7b71fbee6d16

  Score

  10^/10

  agentteslakeyloggerpersistencespywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Drops file in Drivers directory

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2