Extracted

• • Target

    Fiyat teklifi Istegi_23051609051 ürun Etiket scan0010.exe

  • Size

    747KB

  • MD5

    d5d197b61c8f4dc96530d345ef16e410

  • SHA1

    ab14341e4f7570c14ded8b5ce2cf1d7e23db8d3c

  • SHA256

    a5e39f16cb3dec0b3e2b6fe876bbfa1805f2266011289cf24864b3b85d9e5561

  • SHA512

    a42353aa2d72e7c22da54f214377fce7ffd26e40aa4c142f7449439a0e68ec35e2e8158603ed99d000fb014200fb7e6a1776064d6a6cd0e202723002d264ea44

  • SSDEEP

    12288:nnAMTihh6xhZ6OrEjKPrkUi0+jTp2kZWqYdMLw1AShBkMETtOpAARED1SGimFJKT:AMUgh8yOxvTjt2kc5aUW+BetW4R/iKc

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2