Extracted

• • Target

    1508ae003b124c788d43b4cdfc2234c304ec557cffb088280671893e3c89bab0

  • Size

    1.3MB

  • MD5

    ecc1957c533cf2349d9fc098416e3ccb

  • SHA1

    431d19037b7e42d5cd9dc8b2f0b74d1afba1dbf6

  • SHA256

    1508ae003b124c788d43b4cdfc2234c304ec557cffb088280671893e3c89bab0

  • SHA512

    e11555309666d894ca448f0f51f94ec20a6761c4b00e89953a8b04cf7f1d4ed0a0fd56f7ee5bbc951df8a0c5119205d793c551bf5b4cb4762c93afb50c5d2e22

  • SSDEEP

    24576:bqDEvCTbMWu7rQYlBQcBiT6rprG8a01CKvDfd+1bP:bTvC/MTQYxsWR7a08Kvjcb

  Score

  10^/10

  agentteslazgratkeyloggerratspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Detect ZGRat V1

  • ZGRat

    ZGRat is remote access trojan written in C#.

    ratzgrat

  • Suspicious use of SetThreadContext

  behavioral1behavioral2