General
- Target SecuriteInfo.com.Win32.PWSX-gen.29936.exe
- Size 1.2MB
- Sample220908-p2cbaaefb8
- SHA256 db477691da6e5858fb64ce7aa52f6dd983fdb2e7582a441ee45e6b00572f5fe9
Score
10/10
Malware Config
Extracted
Credentials
-
Protocol
ftp
-
Host
ftp.artrsllc.com
-
Port
21
-
Username
-
Password
aJ{?30{raou;
Extracted
Family
-
agenttesla
Credentials
-
Protocol
ftp
-
Host
ftp://ftp.artrsllc.com/
-
Port
21
-
Username
-
Password
aJ{?30{raou;
Targets
-
- Target SecuriteInfo.com.Win32.PWSX-gen.29936.exe
- Size 1.2MB
- SHA256 db477691da6e5858fb64ce7aa52f6dd983fdb2e7582a441ee45e6b00572f5fe9
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext