Extracted

• • Target

    NEAS.efb990b265b89f501b598ed453cc51f0.exe

  • Size

    234KB

  • MD5

    efb990b265b89f501b598ed453cc51f0

  • SHA1

    2272a97180c2ab4cb28af68988f33ff4e144ac44

  • SHA256

    ecf63bc57d9d081e0ecaa0dd617e4745478aea2f0b26ed1d06c9ca0635b7ae6e

  • SHA512

    17b7964b877630afc1e86f1b78d5835016dd8a6c4b68810826eab1577c9e2d8bdf9bcf50398aadd4a3d14ae5cc711d48a3e31b920a0be9ba41f6227eb96b4721

  • SSDEEP

    6144:32zvC+iGyuqccQw5rpFybMJBc1O5akNDbi1:32DC+iGyPccQwrpFybs51V

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1behavioral2