agenttesla | fb5651783aa30a4f97c6ab35821f4c5b62df5be300d389cbf22d39f796018c71 | Triage

Submit
Reports

Overview

overview

Static

static

5

fb5651783a...71.exe

windows7-x64

fb5651783a...71.exe

windows10-2004-x64

Sharing

General

Target

fb5651783aa30a4f97c6ab35821f4c5b62df5be300d389cbf22d39f796018c71
Size

1.3MB
Sample

240430-bq7fdsgf3w
MD5

c88c8853ba9b515a190f40e021e67d8d
SHA1

5122640fd3a15206061690c8c1b0b77c3e5e1554
SHA256

fb5651783aa30a4f97c6ab35821f4c5b62df5be300d389cbf22d39f796018c71
SHA512

5aba0898921e825d0dd75ef805b85c2f774abce162180fc65494e5fa099c39e06be789f3a757b8565c4b53663a330566cdbdaeee6dc966fb9bb0cace6bb39792
SSDEEP

24576:iAHnh+eWsN3skA4RV1Hom2KXMmHa1jLmBgFCWSOBpiuEgrR5:lh+ZkldoPK8Ya1bgOZh

Score

10^/10

agenttesla zgrat keylogger rat spyware stealer trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

fb5651783aa30a4f97c6ab35821f4c5b62df5be300d389cbf22d39f796018c71.exe

Resource

win7-20240419-en

agenttesla zgrat keylogger rat spyware stealer trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

fb5651783aa30a4f97c6ab35821f4c5b62df5be300d389cbf22d39f796018c71.exe

Resource

win10v2004-20240419-en

agenttesla zgrat keylogger rat spyware stealer trojan

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  fb5651783aa30a4f97c6ab35821f4c5b62df5be300d389cbf22d39f796018c71
- Size
  
  1.3MB
- MD5
  
  c88c8853ba9b515a190f40e021e67d8d
- SHA1
  
  5122640fd3a15206061690c8c1b0b77c3e5e1554
- SHA256
  
  fb5651783aa30a4f97c6ab35821f4c5b62df5be300d389cbf22d39f796018c71
- SHA512
  
  5aba0898921e825d0dd75ef805b85c2f774abce162180fc65494e5fa099c39e06be789f3a757b8565c4b53663a330566cdbdaeee6dc966fb9bb0cace6bb39792
- SSDEEP
  
  24576:iAHnh+eWsN3skA4RV1Hom2KXMmHa1jLmBgFCWSOBpiuEgrR5:lh+ZkldoPK8Ya1bgOZh
Score

10^/10

agenttesla zgrat keylogger rat spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Detect ZGRat V1
- ZGRat
  ZGRat is remote access trojan written in C#.
  rat zgrat
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslazgratkeyloggerratspywarestealertrojan

behavioral2

agentteslazgratkeyloggerratspywarestealertrojan

© 2018-2024

Terms | Privacy