Extracted

• • Target

    QUOTATION_JUL7FIBA00541·PDF.scr

  • Size

    1.4MB

  • MD5

    9cab33d5a009f172c6da95483dcb1e39

  • SHA1

    7ea30e4df73e190e86f0965a743271632fa2b838

  • SHA256

    3c2129e1c7b154ba70dcb01035d8538f8092d5091f38048a02254cc435701248

  • SHA512

    9442f55ca56c6795e41dd7dc255d83ed71cddc9512168f1479c0af02fbd029800c890f991fad6bbc3637743b17e948b9fd55edaec15c1a1dd31d3f5032e4453b

  • SSDEEP

    24576:YijgHRq0p5Bsc/n/8yaErOzGa6DG0FhP:YiM8I1//xYGa6S0Fx

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2