General
-
Target
1372-70-0x0000000000400000-0x0000000000430000-memory.dmp
-
Size
192KB
-
Sample
230329-h9dqrafc29
-
MD5
036870b43dcd00ba84d0659fdf501370
-
SHA1
59b0287dc5ee036a4346c243ddeee340a43be60f
-
SHA256
656cb576ce878c5d98dcf76db6b26d70fbc1cddf80165851d049ade01ba5b5f2
-
SHA512
2de86d425ba766532af41acd1b1e472f9def65f7fc77aaa8a47e76aa05bf147db82e28a0229191ba298e8f4286da45e07cc9cbbd904798fc86b8a5321d774c60
-
SSDEEP
3072:mniuhTwHn61LCFB5vARDNnBZm1Dn+tm5dvZiKyIzI/HT:EwAGFLvA1A1D+tm5JrGPT
Behavioral task
behavioral1
Sample
1372-70-0x0000000000400000-0x0000000000430000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1372-70-0x0000000000400000-0x0000000000430000-memory.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.vulcano-group.com - Port:
587 - Username:
[email protected] - Password:
LY{oo-z$*b_# - Email To:
[email protected]
Targets
-
-
Target
1372-70-0x0000000000400000-0x0000000000430000-memory.dmp
-
Size
192KB
-
MD5
036870b43dcd00ba84d0659fdf501370
-
SHA1
59b0287dc5ee036a4346c243ddeee340a43be60f
-
SHA256
656cb576ce878c5d98dcf76db6b26d70fbc1cddf80165851d049ade01ba5b5f2
-
SHA512
2de86d425ba766532af41acd1b1e472f9def65f7fc77aaa8a47e76aa05bf147db82e28a0229191ba298e8f4286da45e07cc9cbbd904798fc86b8a5321d774c60
-
SSDEEP
3072:mniuhTwHn61LCFB5vARDNnBZm1Dn+tm5dvZiKyIzI/HT:EwAGFLvA1A1D+tm5JrGPT
Score1/10 -