Extracted

• • Target

    d523fd0dbe2daaefc69c8cf403488c391bae37f7992999f973ad9aae0b6b7d31

  • Size

    986KB

  • MD5

    534ddc77f7ed6bf0b772408d30fd0677

  • SHA1

    c0ab134c8f28764d1013667e81cfed900f8cc3f0

  • SHA256

    d523fd0dbe2daaefc69c8cf403488c391bae37f7992999f973ad9aae0b6b7d31

  • SHA512

    99f45980e76e7f9a2e6442b1e1a21609ca1204018efee936b3f8ff4a44667c27a55a2a284b27b530d4505ceb9705720df9f10171a4bbe98f731ccfd717272017

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojanmetastealer

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Meta Stealer Stealer

    Meta Stealer steals passwords stored in browsers, written in C++.

    stealermetastealer

  • AgentTesla Payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2