Extracted

Extracted

• • Target
    090098899999.exe
  • Size 501KB
  • SHA256 23f373877f7e464405b857ef0c110f08a037d6750c3af4b60c16dc709b569c27
  • MD5 ffd5272f2497cc796019db487c142ea8
  • SHA1 48baa2173944e2e3876ef84cfa432d84f0040e27
  • SHA512 39bbda0b8be584d488eedf079ff916a7d76d67210033e0997abb52764f2d57c5d8167ea217b8b07fae54857ba453ad5f3fe863cb30ca2e9ad158c27b2fad4059
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2