Extracted

Extracted

• • Target
    INQUIRY.exe
  • Size 861KB
  • SHA256 5de4ad16045f2d191a0f768e8bea6a48d7da3618620badef959345b37e1b4256
  • MD5 d66a6d20aefb0e9d1ab681e17a38e048
  • SHA1 17db02077ab6d2fb3b2db239273f32ff13c528c9
  • SHA512 2fe27d4f5e07946b2d0df4e6d9443964a0967c05df419e8f8141467e641aeb741a55f1c7e395c0eeb8433ed78efa818251ee1c1314f39ef0d29e5505b98c34c8
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2