Extracted

• • Target

    5c3a2912958bff3bd0d25b141a32717f0f7c4c7b1091a263185694c2f779f3cd

  • Size

    761KB

  • MD5

    11ecf3ab5737650035ef7e9a3c57f80a

  • SHA1

    31b6aef080ee864059e8a82d8d9d2b3745578f2d

  • SHA256

    5c3a2912958bff3bd0d25b141a32717f0f7c4c7b1091a263185694c2f779f3cd

  • SHA512

    bc14a771bfe31ad55a29aed0f672da9805dee55f8ede8af7518980cdc244ee0c2873eb8b99b751d3c981063fafe9dcecd3b3ccbf257be6be9b199fa395cbbd1c

  • SSDEEP

    12288:2dj50i653yhXyiQmHE1ODGK90f8EcgeL5KDmCxkFTmcj+f8p5:e50iE3yhXyiHE1ONe5eFKDmrFTzj+U

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • .NET Reactor proctector

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2