Extracted

• • Target

    0d978c4233eb92b8e3b73fb445c9c1b42a99af8ddeb005a50a648ff18a519945

  • Size

    540KB

  • MD5

    17374bee9f7614c03fe8efafad46b825

  • SHA1

    54ab5ecdfe57c065f95477092531437f27ebc26d

  • SHA256

    0d978c4233eb92b8e3b73fb445c9c1b42a99af8ddeb005a50a648ff18a519945

  • SHA512

    b6e2977d557aaeb3061d085be6fd24b9de9837af383a0acc154b0372fdd85dbd592549b2f04f99cff551a54f30e5388be25d5c95d93a7868792c4c443119c002

  • SSDEEP

    12288:r/LJwaKOvSxt/Nnzcd3D3IWZMIwjbr1r4eUPB7enz:plvO/Nzcd3wjbJMfVK

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2