agenttesla | 6fcadc10d94ebbafb62fd909da84fc8bd4d097e05d2c8ffe111dae982037a950 | Triage

Submit
Reports

Overview

overview

Static

static

5

6fcadc10d9...50.exe

windows7-x64

6fcadc10d9...50.exe

windows10-2004-x64

Sharing

General

Target

6fcadc10d94ebbafb62fd909da84fc8bd4d097e05d2c8ffe111dae982037a950
Size

1.3MB
Sample

240425-cm2leadf6z
MD5

cff5c70a05d8c31cbbe5b672b0bff870
SHA1

94f728622f8eabceccc8b1f013cf20998f070782
SHA256

6fcadc10d94ebbafb62fd909da84fc8bd4d097e05d2c8ffe111dae982037a950
SHA512

217c235c2baf1611b38cbbb876582ae685ed57509c863cb4dab9efd1ac6ad92d5656bd2749da2df4de10ce52aed72428716ca2537d866fd9f432183012bf12b6
SSDEEP

24576:9AHnh+eWsN3skA4RV1Hom2KXMmHao2MB5X7MZxOtd5:ch+ZkldoPK8Yao55

Score

10^/10

agenttesla zgrat keylogger rat spyware stealer trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

6fcadc10d94ebbafb62fd909da84fc8bd4d097e05d2c8ffe111dae982037a950.exe

Resource

win7-20240221-en

agenttesla zgrat keylogger rat spyware stealer trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

6fcadc10d94ebbafb62fd909da84fc8bd4d097e05d2c8ffe111dae982037a950.exe

Resource

win10v2004-20240412-en

agenttesla zgrat keylogger rat spyware stealer trojan

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  6fcadc10d94ebbafb62fd909da84fc8bd4d097e05d2c8ffe111dae982037a950
- Size
  
  1.3MB
- MD5
  
  cff5c70a05d8c31cbbe5b672b0bff870
- SHA1
  
  94f728622f8eabceccc8b1f013cf20998f070782
- SHA256
  
  6fcadc10d94ebbafb62fd909da84fc8bd4d097e05d2c8ffe111dae982037a950
- SHA512
  
  217c235c2baf1611b38cbbb876582ae685ed57509c863cb4dab9efd1ac6ad92d5656bd2749da2df4de10ce52aed72428716ca2537d866fd9f432183012bf12b6
- SSDEEP
  
  24576:9AHnh+eWsN3skA4RV1Hom2KXMmHao2MB5X7MZxOtd5:ch+ZkldoPK8Yao55
Score

10^/10

agenttesla zgrat keylogger rat spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Detect ZGRat V1
- ZGRat
  ZGRat is remote access trojan written in C#.
  rat zgrat
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslazgratkeyloggerratspywarestealertrojan

behavioral2

agentteslazgratkeyloggerratspywarestealertrojan

© 2018-2024

Terms | Privacy