Extracted

• • Target

    Ordine Request No_083024.exe

  • Size

    1.1MB

  • MD5

    05be855f8e6665ee23a7dd09124dcb5e

  • SHA1

    6bda375c5c8c2733de77ebc783ab22cbe03adb5f

  • SHA256

    0b94b8e6535d5002d6f815614208fc62ac44a7cf8bd0e7d5b7dcc1bf2f15b0f7

  • SHA512

    bb658202935d7d438dc5958d904c53b1f992f93e8026e19c0b6703708e449d94b0138200454df45c4d2b840b9938f3457c364c2c612f179a89527bf6c9545d2c

  • SSDEEP

    24576:7qDEvCTbMWu7rQYlBQcBiT6rprG8aZPiwu7HeFGg:7TvC/MTQYxsWR7aZPiwu6FG

  Score

  10^/10

  agentteslacollectioncredential_accessdiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2