General
- Target DOCUMENTS.exe
- Size 1.4MB
- Sample201119-5fdecgl83s
- SHA256 9d1d3e7e960ed2939190d8cb99aec48b885dabfc1b9f61bbfcb5c4a5abd7e6ab
Score
10/10
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
ftp
-
Host
ftp://files.000webhost.com/
-
Port
21
-
Username
zinco
-
Password
computer147
Targets
-
- Target DOCUMENTS.exe
- Size 1.4MB
- SHA256 9d1d3e7e960ed2939190d8cb99aec48b885dabfc1b9f61bbfcb5c4a5abd7e6ab
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla Payload
-
Suspicious use of SetThreadContext