agenttesla | 02733354b801cdf3f1770a0e9dee66f4b578241105d9ef15117e7bdb1abcad53 | Triage

Submit
Reports

Overview

overview

Static

static

5

02733354b8...53.exe

windows7-x64

02733354b8...53.exe

windows10-2004-x64

Sharing

General

Target

02733354b801cdf3f1770a0e9dee66f4b578241105d9ef15117e7bdb1abcad53.exe
Size

1.1MB
Sample

240510-mchewscc93
MD5

55f25b3ea6de1642b9aa771002b54c5b
SHA1

929f1c5b44b54293a657f4abb5573746878d3cb8
SHA256

02733354b801cdf3f1770a0e9dee66f4b578241105d9ef15117e7bdb1abcad53
SHA512

6770fb0a25426f3070c018d23e6b1c6e6e77999ac6b8e0d8e233f1285c73d3602268f6b2f276e230be8a29673007cb8e9aad6c3783c6946d5fb4384c4e106441
SSDEEP

24576:yqDEvCTbMWu7rQYlBQcBiT6rprG8aZ3YH1Rckm2bXNT:yTvC/MTQYxsWR7aZ3Y3HT

Score

10^/10

agenttesla zgrat keylogger persistence rat spyware stealer trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

02733354b801cdf3f1770a0e9dee66f4b578241105d9ef15117e7bdb1abcad53.exe

Resource

win7-20240419-en

agenttesla zgrat keylogger persistence rat spyware stealer trojan

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

02733354b801cdf3f1770a0e9dee66f4b578241105d9ef15117e7bdb1abcad53.exe

Resource

win10v2004-20240508-en

agenttesla zgrat keylogger persistence rat spyware stealer trojan

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  02733354b801cdf3f1770a0e9dee66f4b578241105d9ef15117e7bdb1abcad53.exe
- Size
  
  1.1MB
- MD5
  
  55f25b3ea6de1642b9aa771002b54c5b
- SHA1
  
  929f1c5b44b54293a657f4abb5573746878d3cb8
- SHA256
  
  02733354b801cdf3f1770a0e9dee66f4b578241105d9ef15117e7bdb1abcad53
- SHA512
  
  6770fb0a25426f3070c018d23e6b1c6e6e77999ac6b8e0d8e233f1285c73d3602268f6b2f276e230be8a29673007cb8e9aad6c3783c6946d5fb4384c4e106441
- SSDEEP
  
  24576:yqDEvCTbMWu7rQYlBQcBiT6rprG8aZ3YH1Rckm2bXNT:yTvC/MTQYxsWR7aZ3Y3HT
Score

10^/10

agenttesla zgrat keylogger persistence rat spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Detect ZGRat V1
- ZGRat
  ZGRat is remote access trojan written in C#.
  rat zgrat
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

agentteslazgratkeyloggerpersistenceratspywarestealertrojan

behavioral2

agentteslazgratkeyloggerpersistenceratspywarestealertrojan

© 2018-2025

Terms | Privacy