Extracted

• • Target
    Attached Quotation.exe
  • Size 843KB
  • SHA256 e42b0ae4e264c685e8314d49f942606669d0b7b4edf0b2268ed75011fbde2ecb
  • MD5 a3222ba355db0291508a92f11feadd1f
  • SHA1 dc56d7a8d4cc57f9f18f394a5c1fbb5b9c6119c1
  • SHA512 c3489c2fd27f3b18d3fdf141712e832e2f6d5601bf56324a17046a245f03a2648d2a5c317fe2de46cd48489d00ca66321c454cd88e4ba8fec9b71e46f897bb58
  • SSDEEP 12288:Nfu8kWhyQShx1E4JLDNAPF90WsLoXOKP9Xv1WtF1BtX8wMZT:FCjQqrJLDOX0toXOGktBV4T
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  agentteslazgratcollectionkeyloggerratspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Detect ZGRat V1

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2