General
- Target SecuriteInfo.com.W32.MSIL_Troj.BEJ.genEldorado.5051.77
- Size 1.2MB
- Sample210701-rj2ztp3cda
- SHA256 b431ce5dc4ecd3ca9efbce074bbe8c85602765dc2a8cf98cc3765f6298f71569
- MD5 06fad614300b1d987c571fd83e27a783
- SHA1 0bc7a24116aecf2b305e874edccf5d2377e6a5c5
- SHA512 c58a0d527a8a6f15f936502242e50725a53513925eabafb30c869ea5bed08e371c015bbab5b8758aa0ab1501d339206b0f48c7a7714bbcd39d4271606419e985
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.W32.MSIL_Troj.BEJ.genEldorado.5051.77.exe
Resource
win7v20210408
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.W32.MSIL_Troj.BEJ.genEldorado.5051.77.exe
Resource
win10v20210410
0 signatures
0 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.privateemail.com
-
Port
587
-
Username
-
Password
GOODGOD1234
Targets
-
- Target SecuriteInfo.com.W32.MSIL_Troj.BEJ.genEldorado.5051.77
- Size 1.2MB
- SHA256 b431ce5dc4ecd3ca9efbce074bbe8c85602765dc2a8cf98cc3765f6298f71569
- MD5 06fad614300b1d987c571fd83e27a783
- SHA1 0bc7a24116aecf2b305e874edccf5d2377e6a5c5
- SHA512 c58a0d527a8a6f15f936502242e50725a53513925eabafb30c869ea5bed08e371c015bbab5b8758aa0ab1501d339206b0f48c7a7714bbcd39d4271606419e985
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext