Extracted

• • Target

    SecuriteInfo.com.Win32.CrypterX-gen.13618.8536.exe

  • Size

    985KB

  • MD5

    40ecdcf0eb8804ebfcd7b6cf80459349

  • SHA1

    2ba3b24de2e94dd6d72a5c0f93abca878b96e67b

  • SHA256

    526d6cde87c2b1c82a4d15da609e6661f7e13983d2ed2c53f061e994668a047e

  • SHA512

    b2271e8f1e30b26eeb5494b70ec5a9f2bda060d580857c42ea3fa9a12b90a5f3b3dce474cf3104264d67649c5792df2e9ba1a8efbbb1d16b6d44343dddfc5b77

  • SSDEEP

    24576:4av3XrjJQ5B8pnzTMMFEOBW3UuSa9oFhcr:4uJDZvMOnMExk06

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojancollection

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla payload

  • Drops file in Drivers directory

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2