Extracted

• • Target

    59494a51618f234021c0dae2d87667ce9e431b8a75a1b4952d3e48bf71492fbb.exe

  • Size

    2.1MB

  • MD5

    8168481e7fcc45a8c01adc93985bf29c

  • SHA1

    28e8c9bd9b0274ab5767e47c263d46b174e780d7

  • SHA256

    59494a51618f234021c0dae2d87667ce9e431b8a75a1b4952d3e48bf71492fbb

  • SHA512

    b241186b7de203b5ed910b6e3abda1cdbf1fd5a19a2f7d743fbc9906d71a1a4a429bffd1f37ceb6b976aa1069f5865bacd1ed32540d0af04633cc585317bba3f

  • SSDEEP

    24576:tipf1GQCFmAQEjlvZpLcOq4aBgzGWTAB:SoFllVq4DzGWTAB

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2