Extracted

• • Target
    REQUEST FOR QUOTATION.exe
  • Size 485KB
  • SHA256 447235c202bca3db7596b2c56520f599911d763ff35c60bcfb1ede433a48d1f9
  • MD5 0017d17282a129581734bed8909a1834
  • SHA1 ed531a64ea7760b4340050b0c0ac22c986bfbed9
  • SHA512 d44a6c3163ab5a85bed8d191a1390cc82b66cf36b5e93712a7ae25e781aec4769cf2b07263eefa5ede36ab67e92517e07d4dc9f2c148f328cc1cf1cccf9727e8
  • MD5 SHA1 SHA512

  Score

  10^/10

  keyloggerstealerspywaretrojanagenttesla

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

    keyloggerstealer

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2