Extracted

• • Target

    p004575839574947.exe

  • Size

    1.1MB

  • MD5

    f90d87222db82285ce87a988b372524a

  • SHA1

    b4a571be12134d9ff6c91fc8fc46b8f53ba3d176

  • SHA256

    53873190e732fcbe931729aadb3d4f878d74bd17dc64c282b4efa1f87d021b43

  • SHA512

    299c35d9c16ce2479b104787d04f50f644db735f540a148d07cef32a78f01343d15b9c7610ebd88482eec76e600c80f4b33152228d4af69cf43c29aa72a4e116

  • SSDEEP

    12288:00ZeZOUnaKuQdJFUbDLYqid+3eo9geDCknIfblyi7uDvOI8fpXVNLhc5LiJMUZCp:9KgoYi3ImgiSs/1cNQz9oG

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojancollection

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Uses the VBS compiler for execution

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2