Extracted

• • Target

    Outstanding Statement-0413.exe

  • Size

    800KB

  • MD5

    d1a4c4d05ecd22dc4911c2d2a95a4e05

  • SHA1

    7566d86a447176a6a73ec6603df6a987da8681b1

  • SHA256

    08caa9af8bc3d72fc768962c2319b86c9712a2437e6ca0e7cca8fc1049536def

  • SHA512

    0d7f15d94f381ebcb14669f81d605709a37c2624559eb0b15a013f3703a626866ee74a6f71aad7980d7d4f3871ff18cec21ff3ebe48b9ee6efbaf698a93c0ea9

  Score

  10^/10

  agentteslakeyloggerpersistencespywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Drops file in Drivers directory

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2