Extracted

• • Target

    SecuriteInfo.com.Trojan.AutoIt.1343.8817.993.exe

  • Size

    588KB

  • MD5

    d797600296ddbed4497725579d814b7e

  • SHA1

    54b22078651dcee13472858d706f886a34678b2e

  • SHA256

    c25a6673a24d169de1bb399d226c12cdc666e0fa534149fc9fa7896ee61d406f

  • SHA512

    f3f9a54bc4da8c19434bf79a494736c16e4bd0cd539cdddd96742dc8bbd569dde7d51e6daca8ae13386e1a7f02efffc81dd713943917bfa107f66bf8c9d6e226

  • SSDEEP

    12288:NYV6MorX7qzuC3QHO9FQVHPF51jgcQTimghLdJ0BNajn5:iBXu9HGaVHNhdUun5

  Score

  10^/10

  agentteslacredential_accessdiscoverykeyloggerspywarestealertrojanupx

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2