Extracted

Extracted

• • Target

    QUOTATION_NOVQTRFA00541·PDF.scr.exe

  • Size

    974KB

  • MD5

    83999a2ce0109ea4adbecb3a96744e8c

  • SHA1

    4b94f4b23b157c7ae2df54e251cd4d22c683134d

  • SHA256

    5030bc30c14139d9c48dc4cd175de6c966e83a9059035d18af33dda06f2541ab

  • SHA512

    f4dfe9396a978d942cc5e8857549da838b17099f57a9fa4fc53761ee06bcff37f4100b263fdccff9565de3db40eb9c71694618433d64d41e66d8765a131328ae

  • SSDEEP

    12288:W2BNuP+2ess0NdGRs5N4r8Zjw/KpBf2fLkzGHH1tfU7:J2JAk15N4r+8C72PfU

  Score

  10^/10

  agentteslapurelogskeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Detect PureLogs payload

  • PureLogs

    PureLogs is an infostealer written in C#.

    stealerpurelogs

  • Suspicious use of SetThreadContext

  behavioral1behavioral2