Overview

overview

10

Static

static

10

928-2159-0...ry.exe

windows7-x64

928-2159-0...ry.exe

windows10-2004-x64

Resubmissions

07/03/2023, 19:35

230307-yandxaba3t 10

07/03/2023, 19:33

230307-x9qgwaba2x 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    928-2159-0x0000000000400000-0x000000000043C000-memory.dmp

  • Size

    240KB

  • MD5

    84ca1e6549335f8fd0e01553a0666800

  • SHA1

    759ba9635dbc34563b44850d252a213c6052d866

  • SHA256

    f200ab6285a906b825afd447cc0c98f7ec98ff9d9df10dd8feab462bf5f53288

  • SHA512

    03f99329e696751219e90474b487e64170066efd61812f16321b662abc07c4505b7424a6225a0b8023b1d7f81e28be283ecd4970cc6cb00328ee55447c395b29

  • SSDEEP

    3072:jGWkBMT4spf1CUSlU09/y5IUi7nCAHDNSfZbMt0Qwgvjm2uFJq0orRZJkefjbXpS:jM5Ub0V5UmUBgiAh0+LJkkrpd

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     smtp
  • Host:
    smtp.bafaqroup.com
  • Port:
    587
  • Username:
    [email protected]
  • Password:
    bs%K^dS2

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla

Files

  • 928-2159-0x0000000000400000-0x000000000043C000-memory.dmp
    .exe windows x86


    Headers

    Sections