agenttesla | f571d9cbaf9c5b082c8b4865472c7207ba89907beae9151efdb6a257bc6d2b86 | Triage

Submit
Reports

Overview

overview

Static

static

5

c79733ad7e...cs.exe

windows7-x64

c79733ad7e...cs.exe

windows10-2004-x64

Sharing

General

Target

c79733ad7eefa61a1e3f5f6db5c04ee0_NeikiAnalytics
Size

1.3MB
Sample

240510-msx6aaaa2v
MD5

c79733ad7eefa61a1e3f5f6db5c04ee0
SHA1

f7cf4b7fdf20f5fc9889e1a1995bcbfa4c9b755c
SHA256

f571d9cbaf9c5b082c8b4865472c7207ba89907beae9151efdb6a257bc6d2b86
SHA512

2b4482f9c5ad88d25cd5bd3911137762703ac842a832a1b729ef8fbe5969463289747a8768c229e5f1be8b97403bce03c059900020ed375a42555ffa33bb8905
SSDEEP

24576:kAHnh+eWsN3skA4RV1Hom2KXMmHaqbLYqnzkIojMekzv5:zh+ZkldoPK8YaqbUkzvN

Score

10^/10

agenttesla zgrat keylogger rat spyware stealer trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

c79733ad7eefa61a1e3f5f6db5c04ee0_NeikiAnalytics.exe

Resource

win7-20240419-en

agenttesla zgrat keylogger rat spyware stealer trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

c79733ad7eefa61a1e3f5f6db5c04ee0_NeikiAnalytics.exe

Resource

win10v2004-20240426-en

agenttesla zgrat keylogger rat spyware stealer trojan

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  c79733ad7eefa61a1e3f5f6db5c04ee0_NeikiAnalytics
- Size
  
  1.3MB
- MD5
  
  c79733ad7eefa61a1e3f5f6db5c04ee0
- SHA1
  
  f7cf4b7fdf20f5fc9889e1a1995bcbfa4c9b755c
- SHA256
  
  f571d9cbaf9c5b082c8b4865472c7207ba89907beae9151efdb6a257bc6d2b86
- SHA512
  
  2b4482f9c5ad88d25cd5bd3911137762703ac842a832a1b729ef8fbe5969463289747a8768c229e5f1be8b97403bce03c059900020ed375a42555ffa33bb8905
- SSDEEP
  
  24576:kAHnh+eWsN3skA4RV1Hom2KXMmHaqbLYqnzkIojMekzv5:zh+ZkldoPK8YaqbUkzvN
Score

10^/10

agenttesla zgrat keylogger rat spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Detect ZGRat V1
- ZGRat
  ZGRat is remote access trojan written in C#.
  rat zgrat
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

agentteslazgratkeyloggerratspywarestealertrojan

behavioral2

agentteslazgratkeyloggerratspywarestealertrojan

© 2018-2025

Terms | Privacy