Extracted

• • Target
    REQUEST FOR QUOTATION.exe
  • Size 524KB
  • SHA256 23f73a5c76d3f569e043322817d14f2618301b8ed17db3c52d26813b1a27b298
  • MD5 2d02fc0bb28b135bd28dcd4b66447e3e
  • SHA1 eb509573abe7488ba23a02cb7326fa2f4e3d8c27
  • SHA512 a8ac57edce70b775823a2874439f89006ddf9d53de1cc901aad32ccc985d2d8f09f782bf88231cdc69c9e1df0136046012b3bbc4d8bc4a7e10a15626d356a26b
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerpersistencespywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2