Extracted

• • Target
    Statement of account.exe
  • Size 952KB
  • SHA256 3c6998935f862c2e46ef8d4b5ec303eeb1bbfbbc8d02955799568956ba77e051
  • MD5 9b6c1af53bc3ff4cc15029bdab157649
  • SHA1 b6ef879470b976470cf23640489b00b930b00790
  • SHA512 2ae9bd21decb2ec9789aeb9e576120cada3eb12717237a5b702fdb37d87d0c969852088d28ac9f4eecc4aecfb651ee7fe7ffac14f3feacad558c069404676a33
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2