Extracted

• • Target

    c63396fe648525dfef4beb44e2bb8e7bd117c82cf9a11a102933cdeb734296f3

  • Size

    379KB

  • MD5

    00efdcdb3b9970572aa6072799b27484

  • SHA1

    b8dc8c95255da9f28fe80e4e4cf32e97fb364f65

  • SHA256

    c63396fe648525dfef4beb44e2bb8e7bd117c82cf9a11a102933cdeb734296f3

  • SHA512

    bf29bd32b47fb898bc6bfa9e431a40e39d79a2d81c8a286e25293ea3ee98fa295b4f1a4ae77e88a8b8e63d82018f4f305f0551f16f39629f996d7861e37d35bb

  • SSDEEP

    768:uCYYVM+NGCKG+oSfmfIBnyAWkaHRQMwdz+4H4447iiL1F:pYpYXmyAWNHRjmz+4H444lF

  Score

  10^/10

  agentteslazgratkeyloggerratspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Detect ZGRat V1

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2