Extracted

• • Target
    SecuriteInfo.com.Variant.Strictor.265337.3636.31141
  • Size 842KB
  • SHA256 d46944dd56ae70d47afd746ea51ec24cdaa6f6db2d74fc84d75b2a0d347da61f
  • MD5 1aa8ffabc4c03844a25605b0439a81da
  • SHA1 eadbb30773eae7d9b437f8b111a15fdd52bc5ee5
  • SHA512 86944cf68c5be10cf669e50a4ad7cf3058167096419ce2721ec57b3a8d8a47fb4e4a4b8059704759937f5d88519fe9f5c51903a8a3e2203ebace5cc8f6344126
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojancollection

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2