Extracted

• • Target
    SecuriteInfo.com.Trojan.PackedNET.405.32693.28658
  • Size 679KB
  • SHA256 558c8de9bd5bbcea6e779b8dd474f36cf57317b44aa744ac8562495cf321155b
  • MD5 64bf8b4a70616f1fd208f87d38c33b40
  • SHA1 81c254de561b7fc62f567126a7bd17d00e5b24fa
  • SHA512 96c6bfdab7bfc4095e1fff3209efb11ac03264f87d393935dd2eb694c5091261be895446517237965b7bd61a2e0816b2e665693f2bcf8e9d1737fbb724294c53
  • MD5 SHA1 SHA512

  Score

  10^/10

  keyloggerstealerspywaretrojanagenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

    keyloggerstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2