Extracted

• • Target
    documents and Details.exe
  • Size 835KB
  • SHA256 92d4922b8c19be945de3640add234d12c124bed9faf7f5a0840b9571bec5abe9
  • MD5 c3f10b234f27c2bbbf1c83bed0ec6b4c
  • SHA1 efa0a83d5eca36984554e5ec657099d41df70de0
  • SHA512 585ba21e0e00808cac3b49b58ae0dd33c777d4e431729803ad395c34d05ffaa01c114d19726aac7210baddacac260d139b9dd4ed05d4bb7cab103d6f2d02c660
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2