Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.BackDoor.AgentTeslaNET.20.5206.2075.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.BackDoor.AgentTeslaNET.20.5206.2075.exe
Resource
win10v2004-20241007-en
General
-
Target
SecuriteInfo.com.BackDoor.AgentTeslaNET.20.5206.2075.exe
-
Size
658KB
-
MD5
b2b44061f8271ad0f7d3a4febeb07751
-
SHA1
d312798b7737931cb492abb1b7bd870f44bd9677
-
SHA256
bc5ee788c33389a426c9b5b10405a41a83f6875864bf09b0de6df15ab88cfbda
-
SHA512
c83fcb92a4f175857b621f9b6b411477a8aeed38024a907515a7ec3218ff58a9d05de2d7d09ac5a18e38e400ad3d1f5263b9838df3565ac6fe55964021cf168a
-
SSDEEP
12288:kgc3Vk+O7TL2S/2NuAigYNlU90z7rOICfPoTkZPg0:kgYk+m7AigylU90z7mFZX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource SecuriteInfo.com.BackDoor.AgentTeslaNET.20.5206.2075.exe
Files
-
SecuriteInfo.com.BackDoor.AgentTeslaNET.20.5206.2075.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 653KB - Virtual size: 652KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ