Alerts
Events
DCR
Explore Cyware Products
Alerts
Events
DCR
Go to listing page
Analysis of Native Process CLR Hosting Used by AgentTesla
Malware and Vulnerabilities
April 29, 2024
SonicWall
The initial infection vector is a Word document that downloads and executes a 64-bit Rust-compiled binary. This binary then downloads an encoded shellcode containing the AgentTesla payload.
Read More
AgentTesla
.NET
Code Injection Attack
Rust
Shellcode
Publisher
Previous
US Post Office Phishing Sites Get as Much Traffic as th ...
Identity Theft, Fraud, Scams
Next
Thousands of Qlik Sense Servers Open to Cactus Ransomwa ...
Malware and Vulnerabilities
/https://cyware-ent.s3.amazonaws.com/image_bank/f252_shutterstock_1605101908.jpg)
/https://cyware-ent.s3.amazonaws.com/image_bank/shutterstock_210816841.jpg)
