Extracted

• • Target
    shipping documents.exe
  • Size 1.1MB
  • SHA256 040240ddbb154907ded6e0cb43b04e393764bb24f593ab7fbcf67f2792bc86e6
  • MD5 7ca2e5a2e084c524976eaafc655d6338
  • SHA1 a7123dd6a0941f043cc851fcbca00087c24ac679
  • SHA512 789b41f666fb8da123bc7dadc5fe361fb4f1a5428c1ddc8b33312ab00dfa72558f0113d14e1551b17fd724702b43f05d6c4836605708fb3b4766a127d456bf94
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojanpersistence

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Sets service image path in registry

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2