General
- Target Delivery Note - AWD 200038485852- 2349203968876.exe
- Size 1.3MB
- Sample201109-nwbynabdc6
- SHA256 e4e9ef572164bf9a4d3a790e4dbef3d5767f0def7ff10e10031720a3783e2efd
Score
10/10
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
ftp
-
Host
ftp://ftp.irregnancised.com/
-
Port
21
-
Username
-
Password
boygirl123456
Credentials
-
Protocol
ftp
-
Host
ftp://ftp.irregnancised.com/
-
Port
21
-
Username
-
Password
boygirl123456
Targets
-
- Target Delivery Note - AWD 200038485852- 2349203968876.exe
- Size 1.3MB
- SHA256 e4e9ef572164bf9a4d3a790e4dbef3d5767f0def7ff10e10031720a3783e2efd
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext