Extracted

Extracted

• • Target
    QUOTATION.exe
  • Size 375KB
  • SHA256 950c83d9faeb093972083f1b9fbd47b16ae5b25f1126ce2b61aad3613457ad07
  • MD5 c15ff0f10adfac59e15822ae4e36db97
  • SHA1 dd54c5f9449d0f5c3cd42ac3159cc5dbb9471e26
  • SHA512 3b17e42396a0e83a3b0f37aba3790a7f3c7629787c300b02d8593f5ee85dfe91b7e1095c9d2383b6d6337ce674cfd1fd9d89a8971b2d5adbc9160c885d40a52c
  • MD5 SHA1 SHA512

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • AgentTesla Payload

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spyware

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Suspicious use of SetThreadContext

  behavioral1behavioral2