Extracted

• • Target
    Remittance_Advice_MT103.js
  • Size 1.4MB
  • SHA256 98e7319969ae285211c885e9b0e2b31ca2798ab0a88faaaffdffad168f08a035
  • MD5 1efe165e9d0cc017811033f440728283
  • SHA1 39af4dc034d22b57d86b7b64093e8648e0ea58e4
  • SHA512 941815e17c5d0966c59d87aac7b0206960eeb1b1e59998264dcd5194bded97494e29b3e8a4f904d7a63c273605ad2dd22dfca9c89e44689dbebc21510ab9209c
  • SSDEEP 12288:3J6RRuYRM/siotEJrGAYjJnNH5Z2hjtNp0iuP70BX8CWGVJmKUt+:3J6RRuYRM/siotExGAYjJNH5Mhq8OKF
  • TLSH
    T12F65180F0B3C37379FAA03711468C14613E84AD9E8B69F1C256DD0A8AE74E5F26A55FC
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  collectioncredential_accessexecutionagentteslakeyloggerspywarestealertrojan

  • AgentTesla payload

  • Family: AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Command and Scripting Interpreter: PowerShell

    Run Powershell and hide display window.

    execution

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Accesses Microsoft Outlook profiles

    collection
  behavioral1behavioral2