Extracted

• • Target
    103b7c53953a8fbbdb553ff16e662a2b
  • Size 51KB
  • SHA256 6a8b85c6886faaf1c1e4294350d37d990e28c905867067b8d523558b64562f94
  • MD5 103b7c53953a8fbbdb553ff16e662a2b
  • SHA1 867a59782300339d73be4e65d588288a440d7751
  • SHA512 07793307ae13806a619353c6a92368508b7a5f45f82ec8de12b6422e2c358c71f73b6681e5137e7aed821005f788d58485ed5225a8041c6665e95fca6af9788f
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerpersistencespywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Drops file in Drivers directory

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2