Extracted

• • Target

    tmp

  • Size

    799KB

  • MD5

    8d48c2313eb76a6246b47b858edc3c1f

  • SHA1

    27d7e020e592bbea6d1488e2a3a13e2c3e6815fe

  • SHA256

    43c02a6f5ce94d2e919b673d0e5427fce5de8f921a2a627df59d202705ed45cc

  • SHA512

    34e112098d437aaf266c048a7441d133d4dc7a2211982c89f6a0f79118e79f101b8c6f3a58e49bb8908c9bf821b486e076a2aae594efe9a8c3e878cb78be9306

  • SSDEEP

    12288:TGxmGJJx0e8ppyzvm+E7lCa1dud8+ev2s7NXmelBTO42Mw+3EueH5qxu0AyJkXTs:ixmGJJx07ppyzpEcYzjlZO4hw+3Iqx

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2