Extracted

• • Target

    ΕΠΙΒΕΒΑΙΩΣΗ ΤΗΣ ΠΑΡΑΓΓΕΛΙΑΣ__________________________________________PDF.exe

  • Size

    90.0MB

  • MD5

    d76675b304478b413c040406fb55f3ad

  • SHA1

    3d778df9f308b2afa38d94bb802ae2bf513f7b85

  • SHA256

    12fa710576f09e23ac2f63aeb196115ab2aeea2d63fe5004be38b7edb41cf913

  • SHA512

    8959dddf5eb735995a8750b689b128ed71572f537d2ae18dd763a50a1cbf7e5148cdcaef91b2df9d884d64f8e684d43e15d3736a66b0e4f10b5a5a952f1dd8da

  • SSDEEP

    24576:Wtb20pkaCqT5TBWgNQ7aUgr3VZ4kIqw/hOSwJ9WWtuc63ogIr6A:DVg5tQ7aU23VfxSIcWChe5

  Score

  10^/10

  agenttesladiscoverykeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Agenttesla family

    agenttesla

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2