Extracted

• • Target
    QUOTE 2020.exe
  • Size 1.5MB
  • SHA256 0a44ee4a63f01378570de7668ee2daa17534d296a6ff2c45bc14d8f9b07bb837
  • MD5 e43032455c964f1ca90b4014a84105c5
  • SHA1 f5493fb49122794c78f50d154bfb800a739b9181
  • SHA512 b2631663873269cee72bfb652c91068af0764a5529b765817dbc8c952495faee0ac495e6d3962d85144d9fe2875ed383c8859b785c41d98f6e49c847b7a515b3
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerpersistencespywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Drops startup file

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2