Extracted

• • Target

    Request Quotation.exe

  • Size

    759KB

  • MD5

    9fb2846dca4accdd1c4fcaf212e1c6f6

  • SHA1

    b49cfbe4a19d7ab3ee7d1a33425ccc822bba3d2e

  • SHA256

    d0b71fdf377abca1c191fedeab8311dac158632edb66f3b894166686d61bfad6

  • SHA512

    9ae52ef0f49c06e650c2ede614b6ff5f3a2b6de5cc18b892c5cf72bd583a4919f160ad4c30cac8a126fdaf1e3066a7a674e471138dc70213268f597227e81616

  Score

  10^/10

  agentteslakeyloggerpersistencespywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Drops file in Drivers directory

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2