Extracted

• • Target

    Request for Quotation### rev 1 (27205).exe

  • Size

    651KB

  • MD5

    e51a7f1f3f3d4209821149386e7c285a

  • SHA1

    e1e54d126a4d5e809a53c0d182b2268d1cb5ef9a

  • SHA256

    64b14942869c60d07cad750a8e51c0386cde6cfc65d574480d27ab41caa32baa

  • SHA512

    aad60e4affe0422daa1a32a2ed9e090e23b984f4f3385fc407e80c6dd5c24e2d5babdd7ddbd74b970a13bc7b099bf09171926d3a3a95ace458cf9d26890389e2

  Score

  10^/10

  agentteslakeyloggerpersistencespywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2