Extracted

• • Target

    IMAGE OF AGREEMENT COPY.bat

  • Size

    371KB

  • MD5

    716fc97b18c314063411773cfa96e40d

  • SHA1

    0082e99212389a3f2863cd95f4c9ebc74d11c94f

  • SHA256

    5355439e9a0c11a25ed02d0e8e326a84e1631fc7fd24662982e808179cacef6d

  • SHA512

    8a00ce68096a2899a2c10188ee728942bc7fdbac687cf72bba7cbd4c17f25e0f163a65416fb9650c0d8c99359346972499abafc344df84819a700bc608b55cfa

  • SSDEEP

    6144:gRFt1BvQuGVFraLk//k6BdwwpiH6whnUUUUUJUUUUUUEISUQ:mhB3Lk/c4dhpqDhnUUUUUJUUUUUUu

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Uses the VBS compiler for execution

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2