Extracted

• • Target

    Ödeme Onay Kopyası.exe

  • Size

    1.0MB

  • MD5

    102f24e21c6ebef365ac013322df92be

  • SHA1

    1f2ae631345ea1b6ca6570eb3bf3300e40a3d1d9

  • SHA256

    fa55c7177a87dfc91f227846c8e52fd5f7a073a32e818b5c7f9680784f7c15e2

  • SHA512

    d9573a1c4d7ca08b5775003284febe2830ce744a4e10d1ca1ec5d350c4b12334a2803fa1bf6adcb6007b4eea176b59df7b932d537bceed347b6e470bdc6b69cd

  • SSDEEP

    24576:cAHnh+eWsN3skA4RV1Hom2KXMmHarjvnaIRvf8dP5:7h+ZkldoPK8Yarjvbm

  Score

  10^/10

  agentteslacredential_accessdiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2