General
- Target SecuriteInfo.com.IL.Trojan.MSILZilla.19174.30106.30345
- Size 287KB
- Sample220511-axcc6abfb9
- SHA256 59cb024dac79e0a360f7feab234c5dfe59881d1934a42a9d4ffec1862682e78d
- MD5 3d35e613aed9cf25c3d063d98296547e
- SHA1 bb725971696939c88f726af7be09575bcc560fce
- SHA512 1628e6de54c0e3c80fa01ee890687844b6036b395704543398b8af114408eef78ab62ff7c9446dab108cc2682b46eb9107c089a0801cbe5e6d1275c466f5b628
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.IL.Trojan.MSILZilla.19174.30106.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.IL.Trojan.MSILZilla.19174.30106.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.IL.Trojan.MSILZilla.19174.30106.30345
- Size 287KB
- SHA256 59cb024dac79e0a360f7feab234c5dfe59881d1934a42a9d4ffec1862682e78d
- MD5 3d35e613aed9cf25c3d063d98296547e
- SHA1 bb725971696939c88f726af7be09575bcc560fce
- SHA512 1628e6de54c0e3c80fa01ee890687844b6036b395704543398b8af114408eef78ab62ff7c9446dab108cc2682b46eb9107c089a0801cbe5e6d1275c466f5b628
- MD5 SHA1 SHA512
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext