Extracted

Extracted

• • Target
    damianozx.exe
  • Size 812KB
  • SHA256 edfd6503525b307cf799e91614cb044840b7ce8c1874b0318ad2f068db02b5bf
  • MD5 202930b3b9f35d608922152a696549a0
  • SHA1 b05b681397f5d867e78aeb0a4fcf02f8972480a7
  • SHA512 23ef5f8436ae218bd2abcc950dd331e08cecaa799ba4c1aba7ff5315577ba36f3aaec98d608a6014bb40bb5d2edb4cb8b0bd2b5af635788470253a08ca735e49
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2