Extracted

• • Target

    PO#33S2-202105BsNR.exe

  • Size

    1.1MB

  • MD5

    5dcb9230b7b1fd6a6af46cd3a6b8f7dc

  • SHA1

    accfe3b4df5722111a54d0a225e56522c7a0b1d4

  • SHA256

    d8e652da86fdd7a46e480f4e80616abc1f6ea80a1bfa00bbf70414dac7895480

  • SHA512

    c986d1e6f5561949af2943f7f97bfd3ab5085da1e117ee40d72e9a0d359a85ae45e88162311d96804251f57f60c413467a794ee792607e398eb6df32ed89ab0b

  Score

  10^/10

  agentteslakeyloggerpersistencespywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2