Extracted

Extracted

• • Target

    file.exe

  • Size

    17KB

  • MD5

    d8848c4399130b94784433ee04c41e26

  • SHA1

    d01aef8320666401111ca1276219a6cc773c954f

  • SHA256

    0487dbe76c55bb13881635436dfc7fd3441075f2c8d57f64c462eac80325be2f

  • SHA512

    5f4e285dd313f82e4153143d4719b99fd060807c2fa17a93d052aaff20b6c64971f7ad5e86f1cde135b4695504324af3bcbd616ad329c71b7ee4367d56bb0c48

  • SSDEEP

    384:H3efq/2EA9UYLYp3bmjh/D2yrlffkxttF:06k/D2yrlffw

  Score

  10^/10

  agentteslapurecryptercollectiondownloaderkeyloggerloaderspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Detect PureCrypter injector

    loader

  • PureCrypter

    PureCrypter is a .NET malware loader first seen in early 2021.

    loaderdownloaderpurecrypter

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2