Extracted

Extracted

• • Target
    9fbb0c623c90b128847a87493ccc7dc4.exe
  • Size 825KB
  • SHA256 b9440e31cda0fe1b69ac45901fe2eb19a553abdfce4c7ddfae232bf07d7dc2e8
  • MD5 9fbb0c623c90b128847a87493ccc7dc4
  • SHA1 35d7ba823c8bc4f8945f6b0a63e9889d6d5aee20
  • SHA512 0c53e704f5d4abc666692c7b4f2cd4872eb94d3c589d2669bb7a733c642cd7d13e7016f89a506e3574ef1b6757f0ec4dc25fb8d3359cd8d3752c1ddf9c316d06
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2