Extracted

• • Target

    https://www.mediafire.com/file/6ld7ux4tde3m7wd/INVOICE.tgz/file

  Score

  10^/10

  agenttesladiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Executes dropped EXE

  • Reads AppArmor ptrace settings

    Discovery of allowed ptrace capabilities by AppArmor.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2