Extracted

Extracted

• • Target
    Sample#4078534.Scan..exe
  • Size 569KB
  • SHA256 32b3caca6ecd61d90d09dec0ca94621e8733723c3df41ea63705b740a298e496
  • MD5 e94a881b2e64dee4f530686adb71449b
  • SHA1 46724641eea55768ab10030a67dc644686dd70cc
  • SHA512 450bf5fa8626b67801325540f0cfa3b1d3b232ab989b3ff516e87e1e58dec43869d5b7244abc52cde234a3f12fab97d232caf64905bf724f30e090de36e57a22
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2