General
- Target gunzipped
- Size 2.0MB
- Sample201109-6mda5mb3ca
- SHA256 1e52eae0d858b4fcdd21d5ffcc013da8706adda92afbb791e704556362b8f19c
Score
10/10
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
ftp
-
Host
ftp://ftp.beninsulted.com/
-
Port
21
-
Username
-
Password
boygirl123456
Credentials
-
Protocol
ftp
-
Host
ftp://ftp.beninsulted.com/
-
Port
21
-
Username
-
Password
boygirl123456
Extracted
Credentials
-
Protocol
ftp
-
Host
ftp.beninsulted.com
-
Port
21
-
Username
-
Password
boygirl123456
Targets
-
- Target gunzipped
- Size 2.0MB
- SHA256 1e52eae0d858b4fcdd21d5ffcc013da8706adda92afbb791e704556362b8f19c
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext