General
- Target NEW ORDER INQUIRY-Q23410242023.pdf.exe
- Size 656KB
- Sample230502-pf2daaba43
- SHA256 c6e74929d1f5df0946833f77f1074f8a8518a642067b129dae1ad261ded796f2
Score
10/10
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
us2.smtp.mailhostbox.com
-
Port
587
-
Username
-
Password
JUGCRsm9
-
Email to
Targets
-
- Target NEW ORDER INQUIRY-Q23410242023.pdf.exe
- Size 656KB
- SHA256 c6e74929d1f5df0946833f77f1074f8a8518a642067b129dae1ad261ded796f2
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext