Extracted

• • Target

    ALL THE DOCUMENTS.cmd

  • Size

    1016KB

  • MD5

    0750a2dd5c352fa5aa490daa846b7134

  • SHA1

    8711021d83d4e14b73f0f33563198d757770180d

  • SHA256

    c23ff07c6515d3cf53fc1bc717923cf601bf61bc5f6d578bdfaaef907510ce18

  • SHA512

    711fd8aa94dfccfbc36809aba1fc4f0c17c253df8226b2ebf8f5bdbeca540f7575fde88f0d7b4505a85954f55a6d3a7b580339cf533b92515eb1f90401ed8c27

  • SSDEEP

    12288:JepGlcsoNthxjmjTe/6lglFpqRmjzeu1knuukdp2gJOv1h2/rCFUBer056vFNXU4:5csomjSmQpMAeuanufJYfFF45sX40fl

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Executes dropped EXE

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2