General
-
Target
https://www.mediafire.com/file/ehlma1kgycmqwno/Payment+Confirmation.tgz/file
-
Sample
240425-l2s29ahf4s
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.mediafire.com/file/ehlma1kgycmqwno/Payment+Confirmation.tgz/file
Resource
win10v2004-20240412-en
windows10-2004-x64
17 signatures
1200 seconds
Malware Config
Extracted
Family
agenttesla
C2
https://api.telegram.org/bot7000875199:AAGcJDBHFcfVUBvhBO4xZLw34OXk1NWXSe0/
Targets
-
-
Target
https://www.mediafire.com/file/ehlma1kgycmqwno/Payment+Confirmation.tgz/file
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext
-