Extracted

• • Target
    shipping advice.exe
  • Size 1.1MB
  • SHA256 d54abd6ac9348ed05c33f77ae723cb262bd89fcce7d4d449f16b31ed01f401f4
  • MD5 1e158beaa852a13274b19effe4a010d9
  • SHA1 1d86155b0195a451e36a3d49cd098fba4bf6da23
  • SHA512 908087959e31b423b1cc235482931cab5dc8c561b8192e1fca08440af95d12c7bd7db943e3ed3df19e79937ed0e8d347949c23eeb50a3d155357076eee5701ea
  • SSDEEP 24576:dqDEvCTbMWu7rQYlBQcBiT6rprG8aKsYyfETeX1oN:dTvC/MTQYxsWR7aKsYyfRX
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  agentteslacredential_accessdiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2