Mal/Generic-S + Troj/Tesla-BHC malicious file

The Mal/Generic-S + Troj/Tesla-BHC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Generic-S + Troj/Tesla-BHC virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Mal/Generic-S + Troj/Tesla-BHC?


File Info:
name: F865E3CF5F3029635376.mlw
path: /opt/CAPEv2/storage/binaries/7ba7b04efd4019c0331f9d2efd8353c641c0d1393d6743cfa3d6d401649232ff
crc32: 5B0DC8A4
md5: f865e3cf5f30296353766b374e774261
sha1: 77157d4d36906f6a8e692ad8f0f4fd1c5e65d0ec
sha256: 7ba7b04efd4019c0331f9d2efd8353c641c0d1393d6743cfa3d6d401649232ff
sha512: edd145e50314a64d56cece3d085086171e766e7d176a905371195b5690aa77bfabd711a8fdd5b2d4f823eb146a0a8ee61925d64774536389e981048eeb1f8f26
ssdeep: 12288:EdK+7Srgk6o9RICx7900jOBLSYQkxLGTZ+bJUokZ20k3:YK+Ug5ovdGLSYbeMA+3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E2056D79DE8A7900D032B8F0405BF4A402223EA217E78789DA7BFE0575F6A47DD7152E
sha3_384: 0e838e0395a292148b999e96120fad17373a71563cf042ec3e7ac0727a5cfb2d00f66f9278136dab07b963af5bbfcc7b
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-01-28 11:59:32

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: OthelloCS
FileVersion: 1.0.0.0
InternalName: CharTypeIn.exe
LegalCopyright: Copyright ©  2016
LegalTrademarks: 
OriginalFilename: CharTypeIn.exe
ProductName: OthelloCS
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Mal/Generic-S + Troj/Tesla-BHC also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.38783723
FireEye	Generic.mg.f865e3cf5f302963
CAT-QuickHeal	Trojanpws.Msil
McAfee	RDN/Generic PWS.y
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Kryptik.ali2000016
K7GW	Trojan ( 0058d9ea1 )
K7AntiVirus	Trojan ( 0058d9ea1 )
BitDefenderTheta	Gen:NN.ZemsilF.34232.0q0@a0tnByd
Cyren	W32/MSIL_Agent.CRB.gen!Eldorado
Symantec	Scr.Malcode!gdn34
ESET-NOD32	MSIL/Spy.AgentTesla.C
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Packed.Backdoorx-9937802-0
BitDefender	Trojan.GenericKD.38783723
Ad-Aware	Trojan.GenericKD.38783723
Sophos	Mal/Generic-S + Troj/Tesla-BHC
Comodo	Malware@#1pljn9164ug1o
DrWeb	BackDoor.SpyBotNET.25
Zillya	Trojan.AgentTesla.Win32.708
TrendMicro	TrojanSpy.MSIL.AGENSLA.USPAXAS22
McAfee-GW-Edition	BehavesLike.Win32.Generic.ch
Emsisoft	Trojan.Crypt (A)
SentinelOne	Static AI – Malicious PE
Avira	TR/AD.GenSteal.vwiqn
Antiy-AVL	Trojan/Generic.ASMalwS.35262D2
Kingsoft	Win32.PSWTroj.Undef.(kcloud)
Gridinsoft	Ransom.Win32.Sabsik.sa
Arcabit	Trojan.Generic.D24FCAEB
ViRobot	Trojan.Win32.Z.Sabsik.859136
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Agensla.gen
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.PWSX-gen.C4938499
VBA32	TScope.Trojan.MSIL
ALYac	Trojan.GenericKD.38783723
MAX	malware (ai score=82)
Malwarebytes	Trojan.MalPack.PNG.Generic
TrendMicro-HouseCall	TrojanSpy.MSIL.AGENSLA.USPAXAS22
Yandex	TrojanSpy.AgentTesla!83f/sIwnzNE
Ikarus	Trojan-Dropper.MSIL.Agent
Fortinet	MSIL/GenKryptik.FQGA!tr
Cybereason	malicious.d36906
Panda	Trj/Agent.ALS
MaxSecure	Trojan.Malware.300983.susgen

How to remove Mal/Generic-S + Troj/Tesla-BHC?

Mal/Generic-S + Troj/Tesla-BHC removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X