General
- Target New Order CF 2023-24400.pdf.exe
- Size 570KB
- Sample230412-p4mj2acd47
- SHA256 e79b787e97db18226583aa9c61b0b6bb5de29945714c74636eca2cdf4947cb11
Score
10/10
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
us2.smtp.mailhostbox.com
-
Port
587
-
Username
-
Password
JUGCRsm9
-
Email to
Targets
-
- Target New Order CF 2023-24400.pdf.exe
- Size 570KB
- SHA256 e79b787e97db18226583aa9c61b0b6bb5de29945714c74636eca2cdf4947cb11
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext