Extracted

• • Target

    PDE57450899-TBS8997788T-MVC7896756778.exe

  • Size

    1.1MB

  • MD5

    a4ce1e254f94ddadcdc22828387203b0

  • SHA1

    2ec0421afe6315ab24aa9c4219d5ee602798297b

  • SHA256

    fae3c02edbdbe902b73f28b56b12f62041fc0fc360c42f970cdff0d91310bb32

  • SHA512

    20c044a0332cfda930d43552681602a47b8a27ba977415bf434cb1a85b29a8f7347d9c80d69aa4a72c09a9746f7ab241c7d52add9b513700c8f18b815a3de4a9

  • SSDEEP

    24576:s4lavt0LkLL9IMixoEgeahX2aCKPoiPNR5Mq9MmCS:7kwkn9IMHeahX2axtN4aPCS

  Score

  10^/10

  agentteslacredential_accessdiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2