Extracted

• • Target
    2021 Company Info + Product List.pif
  • Size 793KB
  • SHA256 84c4af3a72552f827a6a2b44a64ee3e06bb01f65e657b8982e5ccb49ddbe7211
  • MD5 691001491c968bbc73a4d1c98e3bbbf6
  • SHA1 666e2f657c0ad9e3ff6065065fc6091a026c5edd
  • SHA512 96f95e990e4e0f044383e8e7cc7e80e1f88d488d357b692333e7548c34b9b8885180f334b4625f186c10fee245cceedf1672a83c485a9293f3c531e3595c4560
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2