Extracted

• • Target
    Request For Quotation.exe
  • Size 605KB
  • SHA256 2717532257cd9ef04649deae085eaa433bd423bb062a9757aa799bef93124838
  • MD5 b6dbaa1d1455e7d066abbd3b70be294d
  • SHA1 c62d8c7c3bacd3414167fd68a8615f2534ea7c66
  • SHA512 aee7b5102dafdfba847c8678010e36d72a79637e98b32cfe9823563b9a4bc7fc9df324fd57bc5208c9a53ea0ec0b03e4ca32fbaf37794da34dc7954a47c7a1ab
  • SSDEEP 12288:+725XUxthzo6aJbjl5dL0p+DiQ8BH3LW1pvVN7dzszMrwk:9WxtFojl5dLaGHOuZV3Trw
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  agentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2