Extracted

• • Target
    Directrices de políticas para empleados_2026.pdf.jse
  • Size 267KB
  • SHA256 be33d0b62d0df6fd5529ae90c822054ac3837ccce8db56bbf1f4b349477053d4
  • MD5 91d7ed6f58fc10eb750eed00c79c1764
  • SHA1 199e24e1a84bf37813cc83b3b591106cdd8a352c
  • SHA512 ad12fb6c970edfc7f7628e67aacf1fedda14a818ca5a35699d2d995b1dcfc2fcbf9f773039e512168205806eed93ebd90d696a5d18697a52600ac145faea73ec
  • SSDEEP 3072:6IxPZr8zehqXXlxSu7SrYwhLF451WSReXjf2JDgxl6ITVk8TLaUkwqWd:3Mwqh7S45cXfADgNC+LNeWd
  • TLSH
    T1F044224573C4E4580797AB3B2A1BB1E5F5AA0CD9778844DBE214FCB8F56430AEED0A70
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  collectiondiscoveryexecutionagentteslakeyloggerspywarestealertrojan

  • Family: AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2