Extracted

• • Target

    497bf18f3fcb0080d21c8f9a98a054bdbcfb7da1fe1c93a28bfdb8b84560b10aexe.exe

  • Size

    739KB

  • MD5

    c74873ebdfa9adb3a07c72fedd70ed5c

  • SHA1

    67a322f8f715f8d5e347efeb5fa25efd98a7b229

  • SHA256

    497bf18f3fcb0080d21c8f9a98a054bdbcfb7da1fe1c93a28bfdb8b84560b10a

  • SHA512

    9cd7f335c8d217581d134f8aba3c1f806b2a6a080070137e50b7ffee567e485b3233a58853ebebd748fc263d69d9400597fea523cfbb7f7221cbd5e4cd9b2951

  • SSDEEP

    12288:5WBCMtW8G34/uK45+po2aWRl2w63HyYNMpWAOgaNn6b+sZJzHh+gekeFqm6y:ii34/up+pJ3lj63HDNEWAOgen6isZ1He

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2