Extracted

• • Target
    9833ed3d730d9a4897ddc1fc4875ccc5
  • Size 1.0MB
  • SHA256 3e927ea7d9e59f48ac8dae514c97f80678cd412e82be06078c1be661eec15e49
  • MD5 9833ed3d730d9a4897ddc1fc4875ccc5
  • SHA1 df3ccedea42cc57038f0d076cc76bd608b3c3f9b
  • SHA512 00b62a343dcf74fbcc2f469083eb7cf9bf1b1d8aa4f8c5da476efebaf169aa967901d66f302dcf8c0bef389c9db07d93d76a0918e82bdc0fba3d838e688d399f
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2