Extracted

• • Target

    LATEST RATE.exe

  • Size

    1.1MB

  • MD5

    5b1f4e2b1ae240311980d2f6186cf88e

  • SHA1

    36e0e9c15f9d21c9ecbd40ac3bdf03ab34245c82

  • SHA256

    5da1b3537b33feef0da4adcc435e682b875de40a6e3ce1024a6c5e483bda8ff1

  • SHA512

    42db37dbf80ce648f72e7afcb8be38b9c81c30e366531d913b9e690c69312d551ef217e343a8810e1c024124cc516df9108ecb299533357ad818e20bd1ab2162

  • SSDEEP

    12288:zWHNC1Q/rusz7NxS+Q7+GvwP2FAihZ+YBtskhYT75geR5Of6oAGGomaJQWRu125X:sLGHK5EGjtWo1raPMVu

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojancollection

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Uses the VBS compiler for execution

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2