General
- Target 57m³ LPG SEMI TRAILER 7 NOS.pdf.exe
- Size 671KB
- Sample230802-j3valade88
- SHA256 01af6a15beb6d627c8e7d255eb0d8f2e1167d710b101973b8da9b50246368bf3
Score
10/10
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
us2.smtp.mailhostbox.com
-
Port
587
-
Username
-
Password
JUGCRsm9
-
Email to
Targets
-
- Target 57m³ LPG SEMI TRAILER 7 NOS.pdf.exe
- Size 671KB
- SHA256 01af6a15beb6d627c8e7d255eb0d8f2e1167d710b101973b8da9b50246368bf3
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext