Extracted

• • Target
    QUATATION REQUEST..exe
  • Size 867KB
  • SHA256 946bf0933ae9952f715bb7405c52fe8ec4ef71bc5ace58859b1c3ae8d93e253d
  • MD5 e7073bf24dd08b10a3228f587b7b2c0a
  • SHA1 4b5144256b1730a081397d5e497e0daa2e09de89
  • SHA512 8a6280021a4eac7e154ef1b9151dcad20ddfe7098b139d9f09c73e6fa68f40e6dfeaec00f9f3e3e3841e660bacf2a3539c0db6e393ea46f2eee1c9abfbf60565
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerpersistencespywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Drops file in Drivers directory

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2