Extracted

• • Target

    Shipping Document_PDF.exe

  • Size

    903KB

  • MD5

    d5b6c7a9db1e3952516b5826253786ff

  • SHA1

    d6efb81396029eb00cd7a0b6377ac252305ffb8e

  • SHA256

    87a80cb6d84c25ce1e248d6542d8c719ca2b877ca6ccce8c2ef33223474b6e51

  • SHA512

    dab82c7262bbd44a8cb9c0c45344728a743db7ed281a858f19c5cf17e5b0b01adfbda54882d7394b777c5b9c87639a7fb808d59f5632bd2cbcf0a9530b6e4748

  • SSDEEP

    24576:F7Ycdq1Bg9M1rhlBV9NolBeIBcABQDp8Mf:F7YcdqnCM1rhjOQIBJef

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojancollection

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla payload

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2