General
-
Target
3992-146-0x0000000000400000-0x0000000000430000-memory.dmp
-
Size
192KB
-
MD5
2710de9c64301623a47129e439ace4af
-
SHA1
22beb563ae539aac17f691fd268822d49aadbd59
-
SHA256
4b142df5a57853541726daa4912a8352b47d3a85c25954c1b1df494a2b5cf080
-
SHA512
adeb23b1c40421c1f8edfeae5e1c5dc92a9a19714765d97ca9113877f7124cb13aad52d6dfef23aae8acc8a58cb25696cd1b7e135e9b12f42b1b81658aef2b3e
-
SSDEEP
3072:MFdJ+FZUhBgB1DjjkuVnEngbvApKRnvDkXTFZl:XUzWHjvjZp4XJZ
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
beracas.com - Port:
587 - Username:
[email protected] - Password:
W4})=!Y3iN3r - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3992-146-0x0000000000400000-0x0000000000430000-memory.dmp
Headers
Sections