Extracted

• • Target

    48acb8f8ec73ee09270a98abbce5091670405ac28ec5016d5cfcfe8439b15eb0

  • Size

    719KB

  • MD5

    1a3a0c8bdf1d6db781adc5d730668495

  • SHA1

    5a41a47ffbac1f5fb03520dd79dea0a1de22b00d

  • SHA256

    48acb8f8ec73ee09270a98abbce5091670405ac28ec5016d5cfcfe8439b15eb0

  • SHA512

    47f19026d24d1a7da6ab551f565bf3d2109109b23723228edfcb8a782407f0cdc1444abcc4651fdd62b1d51293469deca68f075a7eaa59ac5dde945abb9d7693

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojanmetastealer

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Meta Stealer Stealer

    Meta Stealer steals passwords stored in browsers, written in C++.

    stealermetastealer

  • AgentTesla Payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2