General
- Target SecuriteInfo.com.W32.AIDetectNet.01.19407.27277
- Size 709KB
- Sample220822-pgldfsafa3
- SHA256 97c419445239463daaf12bb767b95cb44c43d4ae6d3320e24e2caa8a910ab2db
Score
10/10
Malware Config
Extracted
Credentials
-
Protocol
ftp
-
Host
ftp.artrsllc.com
-
Port
21
-
Username
-
Password
aJ{?30{raou;
Extracted
Family
-
agenttesla
Credentials
-
Protocol
ftp
-
Host
ftp://ftp.artrsllc.com/
-
Port
21
-
Username
-
Password
aJ{?30{raou;
Targets
-
- Target SecuriteInfo.com.W32.AIDetectNet.01.19407.27277
- Size 709KB
- SHA256 97c419445239463daaf12bb767b95cb44c43d4ae6d3320e24e2caa8a910ab2db
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext