Extracted

• • Target

    download.exe

  • Size

    163KB

  • MD5

    dc6e37fd36946a6681955aa9a462a009

  • SHA1

    07aa2d9a8b8cbfad6f88289bf49e38d420354af0

  • SHA256

    8c08ef05c00b42193b35610c68da0730d8f881fc1ec474bc5dfdcf5d4252e440

  • SHA512

    a12708f69794153bf7c4d6e717537a65759dac7a2d0e98ad06c91bd5c2405753839b1524ce8998fcc9254ab167d3016d8ec546c9adadbd4880c9a1b35d7dee51

  • SSDEEP

    3072:Zjl/jgj0yAbLety1u4NjmZ//lETO8tfiBSgKO4d9RrB3sAgJm/Ekd:zlyAbLGotNjmN/OTO8eS53RrFZaor

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2