Extracted

• • Target

    SecuriteInfo.com.FileRepMalware.14031.20391.exe

  • Size

    1.1MB

  • MD5

    d822f5b3ac838341b2643c8908f0bc4f

  • SHA1

    5c2b7db07f3d4356d8b829e764f9ab744d6bca4a

  • SHA256

    9dde591540775e53b8022335ce85851955555fcb54d35511b2b195323c981c11

  • SHA512

    5ce29230039d2ce89430f3c483fb2602a59db93e92f56eb0fa2d5cf2a5f5198c900627f8edd72ed1b8be31dfcac5465b9b00f035ecb50c60207eb41b99916df6

  • SSDEEP

    24576:uRmJkcoQricOIQxiZY1iaC8QOhTxBfJnTtJFZja0BwHfPKPFT:7JZoQrbTFZY1iaC4BxtBjamwq9

  Score

  10^/10

  agentteslacredential_accessdiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Suspicious use of SetThreadContext

  behavioral1behavioral2