Extracted

• • Target

    Rina Molina CV.exe

  • Size

    381KB

  • MD5

    0d48cea7e57d061c16799f78758155a7

  • SHA1

    602c5a5bede289653b3dc2af17d387631c78af99

  • SHA256

    d9ee31e780e46884328d6ddd9655b69bc21b3799148560622c7b0f03067ff9c3

  • SHA512

    90942463d0ff896d1bc3bbd5dce92d3950fd6c6268379f07d2dd0b3c493a6ab422a17d9f31fcb6c948856febc092b5cb888db6e693234490ed14cb8ff64f4803

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2