Extracted

• • Target

    ÖDEME DETAYLARI.exe

  • Size

    1.0MB

  • MD5

    5871ebbf16356dd204562a6e59978b71

  • SHA1

    793c1b28c3ab09c9118b86771f878032d8a833ff

  • SHA256

    f3805d44dbb4499954b88053ba3e51b97d803a9e0cac8825bd084ca74a730496

  • SHA512

    18e45732a060bf45c08d67b6ef73ad5b28efdf4cd99ccf0466a7047e10bb759960de7f10c26f69646dc446d1d7d4c38177fa077f15a99a28bc798854c033f167

  • SSDEEP

    12288:l06gua2iNP1UjNFZXMSSWCegriC3XAipXTc42+h1zs46DrVUxAsBAx:OTv1F8NFlM3WCt7gilv2+rzs4K6xxu

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2