Behavioral task
behavioral1
Sample
1092-67-0x0000000000750000-0x000000000077E000-memory.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1092-67-0x0000000000750000-0x000000000077E000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
1092-67-0x0000000000750000-0x000000000077E000-memory.dmp
-
Size
184KB
-
MD5
bab2e4e141ee228dff81f9ffc4bcd065
-
SHA1
62afcc1eda74c9abf740eeeca08623bf799b9842
-
SHA256
ba82cd5e33230a08a657e088681731669aca5cdd36d1b64bbd8173acb521d355
-
SHA512
d1a2578eff8c039500c3863e72a4d108202eafa1ab5767f32234f542d8a76ca1411e14a2d4c04f3be8e04c9b8b31fd5c8fdb0d09f8a40fef738b2d0bb153006b
-
SSDEEP
3072:7wDfVpGGv4NnclURR6TeUnG7y4oPPZMhMtxfIKCijQqVvV3M1:7KaGgulURRyG7yDPRMhMtxfIxnev
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.galaxybreakdown.co.za - Port:
587 - Username:
[email protected] - Password:
eva369 - Email To:
[email protected]
Signatures
-
Agenttesla family
Files
-
1092-67-0x0000000000750000-0x000000000077E000-memory.dmp.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ