General
- Target invoice_tracking_15092022000000000000000003.PDF.exe
- Size 209KB
- Sample220916-md8ngafde3
- SHA256 f67b4e7c0bd5af7ec047fe55ffc6badc7cf4468a9ac796f1c6344804e7f535c6
Score
10/10
Malware Config
Targets
-
- Target invoice_tracking_15092022000000000000000003.PDF.exe
- Size 209KB
- SHA256 f67b4e7c0bd5af7ec047fe55ffc6badc7cf4468a9ac796f1c6344804e7f535c6
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext