Extracted

• • Target

    sspt.exe

  • Size

    1.1MB

  • MD5

    8f0e01c903d0cade8a1137375dc47e95

  • SHA1

    b041125133c6b72d9f5aab16e4d06d00123158bd

  • SHA256

    d7928afd0b6864968e44f9f0ee807991b3a620f30e57048863ba94a40f291caf

  • SHA512

    82a6d0245102628c4cc3452e6c3aa05440d67b494190be7b6106ac129f6f15963bd91dd885b98a8c9783c746c7f21752899095fd3531893e37938b8795185213

  • SSDEEP

    24576:0AHnh+eWsN3skA4RV1Hom2KXMmHaAy3F184eL45:Dh+ZkldoPK8YaAsK4d

  Score

  10^/10

  agentteslacredential_accessdiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2