Extracted

• • Target

    09ee0caf424df3b1070a23913fe3d016_JaffaCakes118

  • Size

    439KB

  • MD5

    09ee0caf424df3b1070a23913fe3d016

  • SHA1

    75edbc9eff06d5d15c907338c24ed6c2fcf58d61

  • SHA256

    2732029a466cf6c066f468d43b058d2ccda9d0681f73e22f091bd2cf6372c9b1

  • SHA512

    0d996f5ed0748fd8322ff7adbacd54f7b0f66f0b8d5944ab42eb2a5166e00aef074155f00a45cc00f8d576f2e87071a68c8ec111cf07b5477c77b94448519f87

  • SSDEEP

    12288:C1z2V14oFNP0TShN1QbeSr9LK6jqPLeqjVVOScZ1w1:C1z2V14ojBNKjr9O0qPL5jmnw1

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2