Extracted

• • Target

    NEW requirement.exe

  • Size

    735KB

  • MD5

    d4b9f6bbb9325e1a23d299c0e1399935

  • SHA1

    8c23967805c380f4aec14de92c533a4f95542341

  • SHA256

    c4031838bc163076ff2845546cad4c409d9cec8a2100d78d4ea1ea75579f7c37

  • SHA512

    b88b75c0211a2f8835dc519e579b7c0b2c7fe52bf1a108da005efb17917055dab53d379a8a2aa902e460a8fc10f381f0cac2d34d6ff2281d12c6218cf1398313

  Score

  10^/10

  agentteslakeyloggerpersistencespywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Drops file in Drivers directory

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2