Extracted

• • Target

    b03f413c147247793c099866a3845add7aaa7485ccd271229f057d1c0d4fe737.exe

  • Size

    235KB

  • MD5

    da1400f38855061941eb73653f2e00e2

  • SHA1

    4503ea4ab684b1936998c287e8b91e28434510f9

  • SHA256

    b03f413c147247793c099866a3845add7aaa7485ccd271229f057d1c0d4fe737

  • SHA512

    b1a4fce715772d2ed26c3e7a891b56d4c9f71f545ace571369b3ffd406df63e3de6a37f9bd902ef209a57f76b3bd7b9b8b9c3f3c7fcbc278bbe1a55aa28ed42f

  • SSDEEP

    3072:tDDVEh1JlxVh1BGPsw4bOj1jGc6eoK65CdmR7b:tNEh1JlxVhfGPsw4bOZj4kvmR

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1behavioral2