General

  • Target

    2040-64-0x0000000000400000-0x000000000043A000-memory.dmp

  • Size

    232KB

  • MD5

    dcbd7f91de88fd2c528c8b684a81dcf9

  • SHA1

    bb2156bfd0cebcfaf44aa506c7f869db5a817c74

  • SHA256

    ed35326f1ec20ac4ca0e1ac235ed86987eddbdfa9d0df329cb771b271c264328

  • SHA512

    7e509ab4464044c602c642898ef2f7b31be386d2ef49b494ba7946ee6f1f20393154e3b00e346e51167ad8e33deb5d502c73410b655365f2ebca66cb639c21dd

  • SSDEEP

    6144:gG+EctTolSELbcLTD2A4cq3UoXadQpQRs9YzAD6ULBrs/NinvDdSX:gG+EcV2t9d

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    smtp
  • Host:
    mail.safinaco.com
  • Port:
    587
  • Username:
    thuong.ho@safinaco.com
  • Password:
    0973913799
  • Email To:
    peteraltemeier2@web.de

Signatures

Files

  • 2040-64-0x0000000000400000-0x000000000043A000-memory.dmp
    .exe windows x86


    Headers

    Sections