Extracted

• • Target

    0cce272b99fb698e8f758d0eb313486f8b5e8cb3db8a68bb900333553d1878b4

  • Size

    164KB

  • MD5

    75d1dca0cffa7c1aad24ea5ffa93dd53

  • SHA1

    afbe1175673c08cb1489ad2f4e32f4be85f78bf9

  • SHA256

    0cce272b99fb698e8f758d0eb313486f8b5e8cb3db8a68bb900333553d1878b4

  • SHA512

    5b84cfc3935792521cd4244e467cfac07e44857f2e929db27c738ca75d7b420e9a4ee3bd65f4e28cd2323b17c741044a22b047783e5f6c6a55c33857ea32f216

  • SSDEEP

    3072:Ppb2xcb2M1CL4BnjYX3ylyQ6OnRF7Gr3k+xU2j:PgcbYinkXcyQ6OnR03+2

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2