Extracted

• • Target
    comprobante.pdf.bat
  • Size 1018KB
  • SHA256 b5ca0ffeec2a4b6e9b5b4f2473991cf707fd2fded928c340309bcb1bc2ea7fe5
  • MD5 1609f291d7b33baf48a1e2a02f0c046b
  • SHA1 18a5d757860b85685d132a08ce37082cdc185d46
  • SHA512 62231a035a40b6c943f96ef7855ff793175c2156e70a8cc47e708e6d99f7a0afae41322eb36cdbb90696a9607771a8dd4b5b9dc0c1f001802628d0c67ac094d0
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2