Extracted

• • Target

    No. I20220052.exe

  • Size

    518KB

  • MD5

    d7bbc6ef7a09d615e3b8c864b83a03f2

  • SHA1

    e5c05e7a380017c40eb766d7029414c4edad264b

  • SHA256

    2f40f6ef3c46c7e7a51531385abc337e60fed2a22d4a604e39c94ac05e95e03b

  • SHA512

    6e2cae2b05d0839bf09716024bfe93ebf95073f9fa3d211e662e36653c47ae96722c50a41ab66250ff2f3d474382116804e685952791c7218d6c0f251e571533

  • SSDEEP

    12288:sPqlMdaMAUQ1wQhHV7MyEqqpeabdcfOYuMAv3npMovIn05dqrlb:sikqTfrE3PbdlY6Ghb

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojancollection

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Uses the VBS compiler for execution

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2