Extracted

• • Target

    9d2a9f461fef5e3e6115724cc21bb0ef0028dcdc1a70ea32ae9e8a146ec078ac

  • Size

    976KB

  • MD5

    7850d47320202e10b156628105e5c4d8

  • SHA1

    21d8765ce2a6ce989d773dc914abda4bc0705318

  • SHA256

    9d2a9f461fef5e3e6115724cc21bb0ef0028dcdc1a70ea32ae9e8a146ec078ac

  • SHA512

    b19ddb38792cdb13ac2cb8b3824f29d04fb6173f6d8598837db83381706093cf72c16d8f65323d64d63eda376971dc2785b1e451c4588c7369513eeaf58950a0

  Score

  10^/10

  agentteslametastealerkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Meta Stealer Stealer

    Meta Stealer steals passwords stored in browsers, written in C++.

    stealermetastealer

  • AgentTesla Payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2