Extracted

• • Target
    SecuriteInfo.com.Trojan.AutoIt.1430.29949.19414.exe
  • Size 1.1MB
  • SHA256 a4cc3b0c3fdbc7b3d58a3f3906b706c61e3d9191f4fe11d7243fa3dded2e9ec0
  • MD5 90d6c1ca1e9f623d25f7909779fe8e13
  • SHA1 bc99635e757e3eeb1f330c75c732b4697b17693d
  • SHA512 a2a1939876c75904b40f251972dfe6adcc4eaff6c750353724a8adce24ee1201e55749986644f057f1a01aab98f7aba70c60b8040dadd559a20e3bf2e459bbaa
  • SSDEEP 24576:aAHnh+eWsN3skA4RV1Hom2KXMmHa4IszlHusAw5:th+ZkldoPK8Ya4IshP
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  agentteslacredential_accessdiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2