Extracted

Extracted

• • Target
    SecuriteInfo.com.W32.AIDetectNet.01.31248.13148
  • Size 610KB
  • SHA256 57a45cc2512f42b829e6d52fd76edb3f1e9d6b624b8a11ca767186a82d407bc0
  • MD5 bd55d0c104ebe2bdd5cb459748141b38
  • SHA1 1d4e6da2e1bf12edac6e99e2f9551ca1f2205b04
  • SHA512 e692b6425c3bb12c5cd918d7f6522f9640f02f3416091b6ef56eedf404529cbf8694ca7affe853ba7c17f5b9b8f3b2fbb832051a56fa6868ed51810c50d3607a
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2