Extracted

• • Target

    33887e89b9bee91752a8ce8ba3090b7440f9be51454902a42c287fe87f87062a.exe

  • Size

    1.2MB

  • MD5

    c7f2122c54ae2d9fa69c556d4b546f0b

  • SHA1

    5f7e1874bb0a8829453a42384db00f23ea4d3e26

  • SHA256

    33887e89b9bee91752a8ce8ba3090b7440f9be51454902a42c287fe87f87062a

  • SHA512

    ab45d6c2791d7179a443e8e07230c3f2f7368d9b6a2fdfe2e82437ab37f230646ad2956667adf1213fcc7584cc16c33f3d593053a896893b06816581596bfa23

  • SSDEEP

    24576:mRmJkcoQricOIQxiZY1iagXLH7HmDj2OtB5sxvRPTK+6qh4Qd/oY:jJZoQrbTFZY1iagbH7HOaOGBR7D42/oY

  Score

  10^/10

  agentteslacollectioncredential_accessdiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Accesses Microsoft Outlook profiles

    collection

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2