Extracted

• • Target

    86e6188b4ee081fd5f90211e64939c6f32f01590515273a83078d583f65b2262N

  • Size

    1.1MB

  • MD5

    bf6d36ec7a134fcfcc8c7a660f445110

  • SHA1

    6f334db1416de213967e3a832f689f660a9abd0b

  • SHA256

    86e6188b4ee081fd5f90211e64939c6f32f01590515273a83078d583f65b2262

  • SHA512

    748d29354ca572403b3b12fc464ff666a161834c1d1165fbf02729d113c07fbcea65b31ead04e1bf53a9752f7848b4cd3374c0347e5ef0f58ccfda149896074e

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaCEY4Mltv4XSwkoWyR:7JZoQrbTFZY1iaC3Bv4CwSY

  Score

  10^/10

  agentteslacredential_accessdiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2