Extracted

• • Target

    d4a651b647ac71169e1f8da33965a12f53b31603d51ac52700366479731afc5b

  • Size

    234KB

  • MD5

    3f9ff2752006d46bb2ece5ef0b8569e3

  • SHA1

    d4526267b5389b7942d0bd8b998364ae6f8479c0

  • SHA256

    d4a651b647ac71169e1f8da33965a12f53b31603d51ac52700366479731afc5b

  • SHA512

    4c7668fc3ace51d79e6d459093e0191304aba4fc025d5f76aabd6996d81ab390989f60a3851f5ba77480474522e708724ef631ae2d4f577ca7e1cd7f4f237f5c

  • SSDEEP

    1536:0NXVKydlZlRVpYFQOPDmnrbtCagyni6ng3PyhZ5S/jt0k8MN52/Qj:u0CZlRVpwQwmrbzfiYg3K/5E2k8MB

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads WinSCP keys stored on the system

    Tries to access WinSCP stored sessions.

    spywarestealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1behavioral2