General
- Target Payment advice. pdf.............................exe
- Size 445KB
- Sample211124-hmhq7acbbm
- SHA256 b22cde1e2d6bc7eb7dd54d804083f7286607668cce5d965ecdaedeb78ff8c08a
Score
10/10
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.oxc-ph.com
-
Port
587
-
Username
-
Password
oxychempassword
Targets
-
- Target Payment advice. pdf.............................exe
- Size 445KB
- SHA256 b22cde1e2d6bc7eb7dd54d804083f7286607668cce5d965ecdaedeb78ff8c08a
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext