General

  • Target

    1084-77-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    d3b1c16333f56c780b3cad44f02bc44c

  • SHA1

    f91dffb2836598bf745ca43b5cacad9ab19cd1a7

  • SHA256

    bd4e1ecf08d75b00dbaf623e65a049c74e421a9e7a643ba2f91b9a191a97167e

  • SHA512

    1ba8a6ec035d09bfc0a957affacd751bd872cb6a281e7067188d575dae30a33403458c7310dddd4b14a6a76b359a751809a5c7d5ed13f623c9c351e9618ca655

  • SSDEEP

    3072:ttNfVyEUVz1KlZwToif4pqRFrGOda+5ERhdQlI2js:GEOZAGULqHimER7AJY

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.valvulasthermovalve.cl
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    LILKOOLL14!!

Signatures

Files

  • 1084-77-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows x86


    Headers

    Sections