Extracted

• • Target

    Orden de compra 20231130 RingaCorp LTDA_pdf.exe

  • Size

    416KB

  • MD5

    cc6f4d2f70c0b2e78b3a3a2ac85d6558

  • SHA1

    884533d77211f566b0dd3d6b941f95601a1c0665

  • SHA256

    b63c7c8967a492c0c2a30d0b0d4694cfa693b1a1b6db3d7498d4d526889ecc44

  • SHA512

    58059398e8cf7982c87325f2ea0a54cbc3505dd2c203f757fe3c8315e89e84a9e5cfddc9452ab6ed660d9a4852f055effbd9b2d8394892329ac8f8bb41c00076

  • SSDEEP

    6144:gecVmg0JrRy93uhVr2qIfWY3Sksh3z/5:oVCRZCJWARIj5

  Score

  10^/10

  purelogsstealeragentteslacollectionkeyloggerspywaretrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Detect PureLogs payload

  • PureLogs

    PureLogs is an infostealer written in C#.

    stealerpurelogs

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2