Extracted

Extracted

• • Target
    SecuriteInfo.com.W32.AIDetectNet.01.4805.30825
  • Size 25KB
  • SHA256 eade330b178b86366b371786fd358a905e3051a3653b134db0fe4ae9c8dfa676
  • MD5 f10a3c80626412e24080b4e1dd12d8ba
  • SHA1 03de030056c61852148af818d6a2cd569afac2c1
  • SHA512 7c68d5b739977cd12eb5fa936edb6e904236b2c3ae9a5ffbb8501b47504578be62834f0929c747982f4010b0f10e2a107106cfb90cd3368dd264c91e9e156799
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2