General

  • Target

    3592-275-0x0000000000400000-0x000000000062B000-memory.dmp

  • Size

    2.2MB

  • MD5

    87e8448514ab13809e3d7f69765eac2a

  • SHA1

    a6f1244777ea04304cac1f5fe4e86ec9152ff37f

  • SHA256

    7003a7a7205f2c3573261a2be575ba5663939f39fdd944ba7c2d67373f235ce0

  • SHA512

    82a271f7408ae368a4723b034fd2e85bed33359ab54d594fe83dec0639eab5452081e01d4f220b7332fa00d18811ddc567e1906eedb137935f16a036e7ec1961

  • SSDEEP

    3072:lcI2XCLRp/xzcqOcs7KAsgTQ4wP1UANm8uTl/yhSO2x07S+Gbn6c9hjqsU:+IdP/oKAsgjmUANmKUO2u4z7j

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.overviewsupplies.com/
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    X#D=nV}7)9;]

Signatures

Files

  • 3592-275-0x0000000000400000-0x000000000062B000-memory.dmp
    .exe windows x86


    Headers

    Sections