General
- Target SecuriteInfo.com.W32.MSIL_Agent.BVG.genEldorado.13637.20380
- Size 1.3MB
- Sample210308-wrckdsg42j
- SHA256 68abea90e0a89bb507eaa79fdd8df2e0ba0ad79e6f117cccbd4a860cda4e389e
- MD5 67498fe274b311c4b4cf5f61aca831ea
- SHA1 67552ace6af10361571c0160150e402a477c7b0f
- SHA512 5f81d71a9267701e230f4ae5daf6a2bb9de8a7e6f4608874eebfb6e25bd58dc59af28bb177edb4906b9a94e510e9597525db48912757a3a792922c2bd216ac76
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.MSIL_Agent.BVG.genEldorado.13637.20380.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.MSIL_Agent.BVG.genEldorado.13637.20380.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.privateemail.com
-
Port
587
-
Username
-
Password
Biggod1234
Targets
-
- Target SecuriteInfo.com.W32.MSIL_Agent.BVG.genEldorado.13637.20380
- Size 1.3MB
- SHA256 68abea90e0a89bb507eaa79fdd8df2e0ba0ad79e6f117cccbd4a860cda4e389e
- MD5 67498fe274b311c4b4cf5f61aca831ea
- SHA1 67552ace6af10361571c0160150e402a477c7b0f
- SHA512 5f81d71a9267701e230f4ae5daf6a2bb9de8a7e6f4608874eebfb6e25bd58dc59af28bb177edb4906b9a94e510e9597525db48912757a3a792922c2bd216ac76
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext