Extracted

• • Target

    Order Request 09-24.exe

  • Size

    1.5MB

  • MD5

    3e322cacdbc509091f2950c4e04ff85f

  • SHA1

    d4eab59133e0f767f7c954ee11599d7c8fdffafc

  • SHA256

    9e783a78671bd03144b0def1540d93a92dbb8fcdd5a75bfa26a1d11e6c613bff

  • SHA512

    45fa5310f55df604989b511bdc094dda73dcbb3fea40a07253bb692ab33d0275912dcd4fcdbbeb52c33a8bf5b3aa3d2e832c03386b25600e99adcaf005a03497

  • SSDEEP

    24576:EqDEvCTbMWu7rQYlBQcBiT6rprG8aYB/yrO95Haw09t4EtDDkINjtRoSrKm0:ETvC/MTQYxsWR7aYB/t7HartldvoSr

  Score

  10^/10

  agentteslacollectioncredential_accessdiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2