Extracted

Extracted

• • Target
    Swift.exe
  • Size 431KB
  • SHA256 345eea8453a5fd5cd1a5aa11865ef59c187a30b61bf221c2d6276f0f8f4c907c
  • MD5 9ec451a121e3d160ae56f7827d6a0819
  • SHA1 c6c4f893f06a864a8deb209952bb3072f025a0ce
  • SHA512 0333804fba54e3ec6866a40e9c7cbb1d842b53a08be41763744489c93a5f1358facc608f4ba71f9fd6ae9002ae2c3c342820e47068056058c75afea57fb51811
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2