General
- Target NEW P O-46547EHDK.exe
- Size 659KB
- Sample230421-twypjsaf8y
- SHA256 2be390bb4e60319e1878d001c545f5e6122b2dd0f7bfacdefd26edd56ed0dff7
Score
10/10
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.expertsconsultgh.co
-
Port
587
-
Username
-
Password
Oppong.2012
-
Email to
Targets
-
- Target NEW P O-46547EHDK.exe
- Size 659KB
- SHA256 2be390bb4e60319e1878d001c545f5e6122b2dd0f7bfacdefd26edd56ed0dff7
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext