Extracted

• • Target

    Company Profile.exe

  • Size

    915KB

  • MD5

    1c6644952ce7a22c9acabcd3d95414ef

  • SHA1

    87ffc2ab1865111b78ca9b3490251205245f39e5

  • SHA256

    ad39169af0ebe9afeba1bc9947951d8235f938f95fb266282860115bc1cad4a4

  • SHA512

    461b9968cc60e56931aff43511747a2f0771bc726b902073a969352967bee1ad3f03f0f7977fe74a6cc592ea39173d8098a7291edde30eaaef0e5fc14b0d552c

  Score

  10^/10

  agentteslakeyloggerpersistencespywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2