Xone (cracked by Harcha) (extract me) zip Trojan AgentTesla File Malware Analysis: c03994a66907d69f7fba2c80c5494958

Xone (cracked by Harcha) (extract.me).zip Trojan AgentTesla Analysis

Updated 1 year ago

Checked by Malware Check

Xone (cracked by Harcha) (extract.me).zip

Technical Analysis

File Name	Xone (cracked by Harcha) (extract.me).zip
File Type	Zip archive data, at least v2.0 to extract
Scanner Version	1.0.180.174
Database Version	2024-06-24 05:00:14 UTC

⚠

Trojan.Win32.AgentTesla.tr

Malware family: AgentTesla

AgentTesla is a .NET-based Remote Access Trojan used for initial system access. It operates within Malware-as-a-Service frameworks where initial access brokers provide system compromise services to other threat actors. It facilitates deployment of secondary malware including ransomware.

N/A

Detection Rate

1,095,653

File Size (bytes)

2024-06-24

Analysis Date

File Identification

Hash Type	Value	Action
MD5	c03994a66907d69f7fba2c80c5494958
SHA1	731db764b2c7db80a5a22159e6beae55bfd57186
SHA256	244e5b7721f46c859ebcb3c7fba2a2dadb534d073a94d652b198d902d64877de
SHA512	494aa435616e2833a6adc1a23c0000fb484148177595590ac08512f1b87d532e6dd84f220c97adb773416adf47704113215f141eb6cd02c27f95526e2940f46f

Trojan.Win32.AgentTesla.tr Removal

Gridinsoft has the capability to identify and eliminate Trojan.Win32.AgentTesla.tr without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

Start by downloading Gridinsoft Anti-Malware to your computer.
Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
Click on the "Standard Scan" button to begin scanning your computer for threats.
After the scanning process is finished, click on "Clean Now" to remove any detected threats.
If prompted, restart your system to complete the removal process and ensure all threats are eliminated.

Important: Before You Start

Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for

5 4 3 2 1