Extracted

• • Target

    Quotation From Al Ghanim Fencing Industries Co. Ltd.pdf.exe

  • Size

    631KB

  • MD5

    91ed698911c07815e6fd3b5c9e6d839c

  • SHA1

    61fc14ca808c0d215065fe13e6be4906f98b8abd

  • SHA256

    bfc02cc838f9c37b322bc2a390f7cc864c8ba3f817b66c2f0ebdd19d17622011

  • SHA512

    78d521d3335da13979089a19b4c13ba3ede51d3abdba65d51dadb7e54128e415d63b862d6b5c150d289835a87c688c95e9f836f2d3fd1728ecdbd88e84fe266d

  • SSDEEP

    12288:9NfDSmf2yv92LY9rxL6KX4d8mzD0pdZYYTaCtW7QmTZCAPL2KGOJRYWq4kR:9NfDz202M9rZ678mz4PJTaCZmTAAKOJM

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2