Extracted

• • Target

    NEAS.c5b0e9d5e70c12c5530943abf70451eadf9b9de8ddfaac4bc7234dbc580b6e5c.exe

  • Size

    235KB

  • MD5

    a7770cd05872881f3e47e8a9041748fd

  • SHA1

    7606e077fdeb8dc5fbffbf428260baba4f0ba470

  • SHA256

    c5b0e9d5e70c12c5530943abf70451eadf9b9de8ddfaac4bc7234dbc580b6e5c

  • SHA512

    0c4a052618ca146414d688555156b1af6459bf2e0160000c73ac5f693350c683ffd1328e9d445cbfce29b5d93359da69aa48bd1dccd467c453838d631c66e4ff

  • SSDEEP

    3072:X7leieCmy4aJr75o8bnPSTerhCvDiN5+mTHITR6:XZeieCmy4aJr75nbMerhWinToTR

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1behavioral2