Extracted

Extracted

• • Target

    FVN001-230824.pdf.exe

  • Size

    669KB

  • MD5

    10b20add9944bbb31d7e345d2f51bdd0

  • SHA1

    18bd8335860b6480b1ac4054aaa3e37968175bde

  • SHA256

    5fdb3de171431980fb56572dd438f76f0b2d255797c2f1ee9ff55462be22eea0

  • SHA512

    901b5605e0e8896a7f3a0bf39ef50b213751181aab8e48f37e3effa8827be96285649434b89d2e3d43a33fdd9b5af735b90c038bc40cd46e784a37d02fa921fc

  • SSDEEP

    12288:3eQ5vziTSvxHDJMgOGvdu8pEHtK+imNLk3xgpzXw8l/AicgNjdl:3riaTPVuMEHpNg3izLLjNjdl

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2