General
- Target DOCUMENTS ASEAN.zip
- Size 407KB
- Sample230425-j548ksbb8t
- SHA256 85209df68e957cf109c93b31db1708f9fc916fd7004e997df33fde7a01744623
Score
10/10
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
mail.expertsconsultgh.co
-
Port
587
-
Username
-
Password
Oppong.2012
-
Email to
Targets
-
- Target DOCUMENTS ASEAN.exe
- Size 598KB
- SHA256 2826cf1541f69a6790889af933a24db2f28fd8e04a8c5dd5ec2d7ee2ef93d0fe
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext