Extracted

• • Target
    21d5d8b254df4c982f0d5e2289dedce8859f154b494a7a560834c6ff341028ea.exe
  • Size 1.1MB
  • SHA256 21d5d8b254df4c982f0d5e2289dedce8859f154b494a7a560834c6ff341028ea
  • MD5 18aab7228f684178f93f2ee6cf4e409f
  • SHA1 ae8643fc4106800a7f9b76364f2c0919c94830da
  • SHA512 03ae06093cbc8853e8de269d76b0c3fd90a5060c3c49bff6082882291a469befbcdb65db1764b537f4f7e24e712a528358c21ae598a11aca4c6b06e387e4e311
  • SSDEEP 12288:BD9Q6t+p9J/s61NobgAccSqoscCwtN6sD1iWhIP8sVzZDfxsjmbvldYihQoTzOH+:ao8F9qdcO8iWS0CDJfbvliihjT
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  agentteslacredential_accessdiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2