Extracted

• • Target

    Neworder.exe

  • Size

    153KB

  • MD5

    8b935374810ea4a031bdff93abc5e367

  • SHA1

    352c96b1fc842431f2fc0367ea84a3c4cca08ef7

  • SHA256

    49d4472a338ca137c33aeed9eb7fc2a61ec2e095c059bb9f777358e900e4037e

  • SHA512

    4d82e6e733a46aeffc4b0ba060aecfc739debae97da47496de5d70f26ec53dbd8c60cc4ea1fc5f2dac4aef95699489b92e28417e8d0d69b039c35ab042dc3008

  • SSDEEP

    3072:67p1+JUW8z7XYCPL/+xqlNEC+0ASrZqCwbPsRTO/8EfhAP8tB:6117W8XDT/+xWNEh0VMbDAE

  Score

  10^/10

  agentteslakeyloggerpersistencespywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2