General
- Target AWB & Invoice #1006472.zip
- Size 750KB
- Sample220720-h8ddladefr
- SHA256 4bde9f43841d29ce72a20deec55e7081f0c387ebfcdf24ab2e2af88e298d79d0
Score
10/10
Malware Config
Extracted
Credentials
-
Protocol
ftp
-
Host
ftp.artrsllc.com
-
Port
21
-
Username
-
Password
U-m{dfJHMN&q
Extracted
Family
-
agenttesla
Credentials
-
Protocol
ftp
-
Host
ftp://ftp.artrsllc.com/
-
Port
21
-
Username
-
Password
U-m{dfJHMN&q
Targets
-
- Target AWB & Invoice #1006472.exe
- Size 829KB
- SHA256 0fe48a175b79a47314cc8ef8d5768e0a911e08da6b855faba6b41ec82bdebc4b
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext