Extracted

• • Target

    NEAS.f2e4931f21dc86182dac61a7e28a49ea06cf40e4bf32b1d5f89aafcf36aa4014.exe

  • Size

    681KB

  • MD5

    152fbaaaf5bfcb65d7956c87b2aa7465

  • SHA1

    9ea47b883934476d7a85c0752d79305e07bc170c

  • SHA256

    f2e4931f21dc86182dac61a7e28a49ea06cf40e4bf32b1d5f89aafcf36aa4014

  • SHA512

    73522a3edc595071b4400e1ac54ed36e5aca3075ef69d0d1037f78cbcb3d5d9eb4985e21601684f450ea3a2254d423b958117bc716001d1e60eaadecb835cc22

  • SSDEEP

    12288:MCTvJRIovpbse3Fs1lQOt+sAWPD21NAoGu5KLNM8nBat:9vJBbs83TsWAduMpM8nB

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2