Extracted

• • Target

    SecuriteInfo.com.W32.MSIL_Kryptik.DSR.gen.Eldorado.16905.957

  • Size

    1014KB

  • MD5

    866b85b3ade98e5dd7842e3c32b8241c

  • SHA1

    0f866ef62fb1db837a635144cdde91b7b24ab9a0

  • SHA256

    a17707c4a5a15c83eb178719fae6606a62ab9b0ded71a01ce9b44302f22e3341

  • SHA512

    a7871da61e61db5c778e4f371adf19106a118a226ec41068f0e022ce64121f720697fdf3f819a36fe94352e8f2c7111d9e9ef91e6299f4f3cc720bfee526f3d9

  • SSDEEP

    24576:FUCTQvNZPLsLlNgw2WgT+cLtqHgTLwq5Qf:FnQvHQBSPtXqATLQ

  Score

  10^/10

  agentteslakeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • Suspicious use of SetThreadContext

  behavioral1behavioral2