Extracted

• • Target
    Quote 1-2.exe
  • Size 600KB
  • SHA256 3d45c2d722943f528c0d86394c729d962a122f2fde067e69870220cdfb54cbe1
  • MD5 22bcaeb1797cfb834c9674e909eb695a
  • SHA1 27af5da9aefaf748ab81d08e9a4f0bdd67ccca8b
  • SHA512 e73cf24b42129132cb14e9877175da91a515f9f367334d1066b1ad21a3a8fc0c46c76ef678ca3f63bf90febe497cfe86a2c4ec4814a90c16ec0e8b1fd459d6cc
  • MD5 SHA1 SHA512

  Score

  10^/10

  spywarekeyloggertrojanstealeragenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2