Extracted

• • Target
    final_document_jpg.exe
  • Size 612KB
  • SHA256 94b22e09a38c8a1373910f7fad8e45c11003db1048dca3d3a67becbab8fd7470
  • MD5 cf1e9219bc8ece3e272a963dd44350fa
  • SHA1 bc4fad8e3daca4cbfd93978cadb6b22bfd2780bf
  • SHA512 e683fd50e57da9e0b6cdbe2aa1abbf88dfd7812319f6d435376878cbd904fc40168829defbccdc5858fa2ef2c5442e33df356eb6d0972e3d23fdd87607b64f1b
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1behavioral2