General
- Target NEW ORDER INQUIRY-002692023.pdf.exe
- Size 658KB
- Sample230420-mbebvahb92
- SHA256 437d464c090963f6558de403e1c770650438e2128d23eb502c2018e489e2df69
Score
10/10
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
us2.smtp.mailhostbox.com
-
Port
587
-
Username
-
Password
JUGCRsm9
-
Email to
Targets
-
- Target NEW ORDER INQUIRY-002692023.pdf.exe
- Size 658KB
- SHA256 437d464c090963f6558de403e1c770650438e2128d23eb502c2018e489e2df69
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext