Description
Agent Tesla is a remote access tool (RAT) written in visual basic.
d51a8a3027ada81bbca98a43946cf04b117eb8aa96e8ddf0cfcb3b019ae25cc6
441KB
220521-psdsrabbcl
357b3805cc9bf454651b6dbbc8321207
82018567972edac92bcbe99317e3e8ab6ba4e663
d51a8a3027ada81bbca98a43946cf04b117eb8aa96e8ddf0cfcb3b019ae25cc6
aa4ec7c234fe8399084b1405e35617bf6d33c8047f18263dbe32a83e60e5705d7264cd985570152dbfa04dc51d5721ad89d54735d3343dfff1b40106de635625
Family | agenttesla |
Credentials | Protocol: smtp Host: smtp.svpcelectricals.com Port: 587 Username: purchase@svpcelectricals.com Password: svPower@2020 |
Credentials |
Protocol: smtp Host: smtp.svpcelectricals.com Port: 587 Username: purchase@svpcelectricals.com Password: svPower@2020 |
Invoice.exe
5edbc50ab8e12ef777ea5e93a33691a9
486KB
7e594a13f98853957457cac558918559ea9a4353
9758be977d998b5d9fe34b4990e071a1001082b46da18ddfd160f26f46e784fe
ec940bb3bdaa2e39fdcebfb9af5d089f93c550a5c1702faa876f4b7d173ddf52a314da4da529a43cac11d3d7fcc6371a45039692307df8a218c5beb9fcae6bdb
Agent Tesla is a remote access tool (RAT) written in visual basic.
BIOS information is often read in order to detect sandboxing environments.
Tries to access configuration files associated with programs like FileZilla.
Email clients store some user data on disk where infostealers will often target it.
Infostealers often target stored browser data, which can include saved credentials etc.
Disk information is often read in order to detect sandboxing environments.