Extracted

• • Target
    SecuriteInfo.com.Win32.RATX-gen.1832.24679.exe
  • Size 811KB
  • SHA256 4ac078a48ff7d80ccbc37c526e395b51f900c8206afe29e27b2a84bd2cd84532
  • MD5 7fb1638e865e58b80b1726a7f7be73f9
  • SHA1 d1a0f23aa68c74558b2762d21cab404d7ca92217
  • SHA512 c6e24465c67beb6b849ce386065812915160d2cd6afca7a5a9d210a056c3ca6d559d2e7fa494c41da7a0c484b080748210d623b38ebd8b98226c3c511d96b672
  • SSDEEP 12288:Wd6tmebg0pGSMujFv+HUL1300mv6wjIq40+vSIRmx8x4+/LVmIK8:WAtmebgIRvsKJ00mnjIE+v10IZ
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  agentteslazgratcollectionkeyloggerratspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Detect ZGRat V1

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2