agenttesla

General

Target

02733354b801cdf3f1770a0e9dee66f4b578241105d9ef15117e7bdb1abcad53.exe
Size

1.1MB
Sample

240511-bdakwseg57
MD5

55f25b3ea6de1642b9aa771002b54c5b
SHA1

929f1c5b44b54293a657f4abb5573746878d3cb8
SHA256

02733354b801cdf3f1770a0e9dee66f4b578241105d9ef15117e7bdb1abcad53
SHA512

6770fb0a25426f3070c018d23e6b1c6e6e77999ac6b8e0d8e233f1285c73d3602268f6b2f276e230be8a29673007cb8e9aad6c3783c6946d5fb4384c4e106441
SSDEEP

24576:yqDEvCTbMWu7rQYlBQcBiT6rprG8aZ3YH1Rckm2bXNT:yTvC/MTQYxsWR7aZ3Y3HT

Score

10^/10

Malware Config

Targets

- Target
  
  02733354b801cdf3f1770a0e9dee66f4b578241105d9ef15117e7bdb1abcad53.exe
- Size
  
  1.1MB
- MD5
  
  55f25b3ea6de1642b9aa771002b54c5b
- SHA1
  
  929f1c5b44b54293a657f4abb5573746878d3cb8
- SHA256
  
  02733354b801cdf3f1770a0e9dee66f4b578241105d9ef15117e7bdb1abcad53
- SHA512
  
  6770fb0a25426f3070c018d23e6b1c6e6e77999ac6b8e0d8e233f1285c73d3602268f6b2f276e230be8a29673007cb8e9aad6c3783c6946d5fb4384c4e106441
- SSDEEP
  
  24576:yqDEvCTbMWu7rQYlBQcBiT6rprG8aZ3YH1Rckm2bXNT:yTvC/MTQYxsWR7aZ3Y3HT
Score

10^/10

agenttesla zgrat keylogger persistence rat spyware stealer trojan
- AgentTesla
  Agent Tesla is a remote access tool (RAT) written in visual basic.
  keylogger trojan stealer spyware agenttesla
- Detect ZGRat V1
- ZGRat
  ZGRat is remote access trojan written in C#.
  rat zgrat
- Detect packed .NET executables. Mostly AgentTeslaV4.
- Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers.
- Detects executables referencing Windows vault credential objects. Observed in infostealers
- Detects executables referencing many confidential data stores found in browsers, mail clients, cryptocurreny wallets, etc. Observed in information stealers
- Detects executables referencing many email and collaboration clients. Observed in information stealers
- Detects executables referencing many file transfer clients. Observed in information stealers
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2