Extracted

Extracted

• • Target

    cd71cc833546a3996d1239c79610be7e.exe

  • Size

    1001KB

  • MD5

    cd71cc833546a3996d1239c79610be7e

  • SHA1

    ba8f606a1c233d3233370ea3a051ad108a3f51db

  • SHA256

    913a766e99ab73ffaddbac79c02fa9ed34433619a5b28e101bd4f950b9c8accd

  • SHA512

    cbd5082137c071c4175a9d1e046b4bfeb9cb58230d9150c5911018a8696032ef4f901c564c146c253016494f04f52d4f477b076c8257aeee8aa0038f6951882d

  • SSDEEP

    24576:Xu1o89meGH+OyJqssqMj2Z39DtSeK14ve:Xu8e7q1Qtpy14

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2