Extracted

• • Target

    ed018242-a273-4ac4-8046-6408d45645ca.exe

  • Size

    218KB

  • MD5

    0cfc80c17fe676f25cd363293b1a246e

  • SHA1

    c5862e4aeb86663b9125fa26ca6ed8e8319ba6eb

  • SHA256

    77cda955ed9aab83a4eb2c053552d0fc8e1b39ec4c5fd5c7512d49e887f73282

  • SHA512

    99ed39f34c723198e91c1d328fe021ca9aca208500d1e1c613399831386bf7bcccfcdb2a39e7a419169c334eb61e97a861b8e9a37386f19add7c08e5315d2b5c

  • SSDEEP

    6144:wb0j+teYDQh/CiUWDD2oGbEWy0kwQEglug:Lj+pDQpC0myzwQkg

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2