Extracted

• • Target

    hesaphareketi-01.exe

  • Size

    646KB

  • MD5

    90c4d96fe18ec51d2260b21d8f2c854a

  • SHA1

    b7d1cbf9cdc5c68ddbcef2545cbe78ff6f8ae7bb

  • SHA256

    c76d9c2c5330973c035ada7edecd1286791e3c9ba15f98084720eb36b3e3de09

  • SHA512

    6ce93e694aca02b2546c79c818e449d84661f4eb6c34aca1d0a059665875930d0910561741bf88bfc961f1fbbbc9d26d4af76d659c0fbf31f3d58de81db8d6d4

  • SSDEEP

    12288:TX9WYrjOZAr4kMex/arVB+ibery4v+nqhSkvh4inAlkoeskX83mGqQ:L3jP46/wVB+XeEGe4uzKoQ

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Suspicious use of SetThreadContext

  behavioral1behavioral2