Extracted

Extracted

• • Target
    INQUIRY DATA SHEET.exe
  • Size 964KB
  • SHA256 8ccc911fcd00d10fbaabd2df15d2f36a1f53dc385f1c8df0bb58587b0b3b75c7
  • MD5 7f20c68103a9fa462ebc41919fc72e67
  • SHA1 25955aadc80bde9ac006c8d3f626991b01321231
  • SHA512 585b653b1728a9197134d768f47b4422df8341ed5551328b5a8af2df067f23b7cf5739fb5f7c6f5e95d8244d3d3ccf11c268717b1d017f220b43b0481be956d6
  • SSDEEP 24576:Pky9IIS+J+HlHMDA7xnjCN2iKDJHKQDalx4I7a8NHOmyY7ooJTWJ:GKDAFnj8KDJqgaliI+0QY7oG
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2