Extracted

• • Target

    abce65a225a4a867b3a21d42a998332a.exe

  • Size

    1.6MB

  • MD5

    abce65a225a4a867b3a21d42a998332a

  • SHA1

    e1a8f550c517421231f1535a3664c7e18603ffc7

  • SHA256

    de553ee7fcb8a84844e1f3117857d191ea2bd55cab550aea334a18b31a9238bb

  • SHA512

    08927aa662b8cc588e49a4879d323fea65b95ceb568b03d7d2eee35dd473a46cee6a2a608208946f9c3d4ced6d74d257c3a5121d9d629d9186ff9ce728e1bc40

  • SSDEEP

    24576:F+uaW5oaXpcB7mVSaccPuvcd5OGQT/1/0nS+7n4SYwqK4zf3RTsAHWAgqChJ+hug:cCiecylJAVwe5NQuiNB/e

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2