General
- Target New Purchase Order 10082020.exe
- Size 420KB
- Sample200811-d8e1szerf6
- SHA256 bff2f1623b2ab128f79406b793b67413ba0fa8bf2e0cb90c75bf23deea814856
Score
10/10
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.chenklins.com
-
Port
587
-
Username
-
Password
Mx9hRc=G8WE!
Targets
-
- Target New Purchase Order 10082020.exe
- Size 420KB
- SHA256 bff2f1623b2ab128f79406b793b67413ba0fa8bf2e0cb90c75bf23deea814856
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext