Extracted

• • Target

    e6a66069ecf660329729e4617d91430b631199175a4a35f1d7e7df54b97b2edd

  • Size

    670KB

  • MD5

    3b82ffabb21740deb05b4f13014d0f94

  • SHA1

    102f33cb27a23221f11dcbd218b649dcdcb4cfba

  • SHA256

    e6a66069ecf660329729e4617d91430b631199175a4a35f1d7e7df54b97b2edd

  • SHA512

    0aea7990c2915a119fd7004abe6dcde5dbb47fd22494e1966937301b2000abc1b2823a7233685ae819cc2b979c86184cbe9684ae519469493b1094ed432a08c9

  • SSDEEP

    12288:4mvWCvxGbh3qbKSZYbiOAp4jvB85feoe1Hb9+w4N9GEyejjjjjjjjjjjROjjjjj9:uCpGeKSZaop4KeTh+w29v

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2