Extracted

• • Target

    ΕΓΓΡΑΦΟ ΤΙΜΟΛΟΓΙΟΥ DHL Ελλάδα Α.Ε.bat.exe

  • Size

    100.0MB

  • MD5

    091cf2e005afc7393a16a1644e19af9c

  • SHA1

    489ca79f7b9cc5af77c9d281e2b5b8289d49bd30

  • SHA256

    8b4d29d39c1085b7e1fa42bbbb8a0b38b8ae615eaa1d152f4c09756fde5f1b23

  • SHA512

    4619afb10efa219156acbcf08aba716f2c5cd35b6f0f4fbdad94fb0dcfc840565324161f529a844560fada11f019211d687a44ae21b909ce32592539807fed50

  • SSDEEP

    12288:LXe9PPlowWX0t6mOQwg1Qd15CcYk0We1F2OKY4+5PMmXICU9t6j:ShloDX0XOf43h4bmXIC2G

  Score

  10^/10

  agentteslacredential_accessdiscoverykeyloggerspywarestealertrojanupx

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2