Extracted

• • Target
    Item_list_RFQ#7292020_PDF.exe
  • Size 754KB
  • SHA256 0b85e80e717ed9a5901bcaed1db1f0bca254efb93c024670046bf5abc669d833
  • MD5 57891ee94b88b26cd0c764e93893c2a0
  • SHA1 342020d38ff8e233fa31ac06dbf6f8ee393d3bb4
  • SHA512 e1acdf42a0adb5f9d1a7a28895ec652e8cf5f43d8cae47cc3dda45c570c2248eb282b610c7d349ac9428b075d59c6a631b6e4b5013954fabbc22c1ad6d7606f5
  • MD5 SHA1 SHA512

  Score

  10^/10

  spywarekeyloggertrojanstealeragenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2