Extracted

• • Target

    27.exe

  • Size

    1.2MB

  • MD5

    89650dc6800553f58cee7c1471ecd97d

  • SHA1

    78443bb7a6826781f2f414783c248e08f2893cdc

  • SHA256

    a6321a072d7fe8790f12f68fdb8c2e6fd91b212233fd3c98b9169d6b48ed15e2

  • SHA512

    1f7f41bf0c239c43f3d447eaeeeae3044bee6d11d39a0eebc3e260021bbdd88b67ed7fa3c3999b729228559e4ff9f8b282a9d00fd07c3ff682cb0c0c9c102ed2

  • SSDEEP

    24576:pRmJkcoQricOIQxiZY1iaJQ5Q7b7M1q/jQNoxGZo9sH4pMGNJzguYuJWT:mJZoQrbTFZY1iaJQ5Qo1+eo9v/fzRJm

  Score

  10^/10

  agentteslacredential_accessdiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2