General

  • Target

    1740-72-0x0000000000400000-0x0000000000615000-memory.dmp

  • Size

    2.1MB

  • MD5

    c3125029062891a6d65a0ff745dbf4cb

  • SHA1

    ce4f1752182dcd2070176be9724329ea1dabc9a9

  • SHA256

    7fe492c833a6ee611051b5807b9e7549e357808281561199a282c060f515b7d1

  • SHA512

    256564ee79c7a40f02fd9bbbcdcdb0b7098c9d5b35da42d1de5fedca39a60f5a3d035ae24cd25df73b6ec01ac03bda5fb2938a5b302217e50d18fa0426a52b2b

  • SSDEEP

    3072:lcI2XCLRp/xzcqOcs7KAsgTQ4wP1UANm8uTl/yhSO2x07S+Gbn6c9hjqsU:+IdP/oKAsgjmUANmKUO2u4z7j

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.overviewsupplies.com/
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    X#D=nV}7)9;]

Signatures

Files

  • 1740-72-0x0000000000400000-0x0000000000615000-memory.dmp
    .exe windows x86


    Headers

    Sections