General
-
Target
4848-21452-0x0000000000400000-0x0000000000611000-memory.dmp
-
Size
2.1MB
-
MD5
002087a8c8378caed2acb61a3c0734cd
-
SHA1
e4f9424d9329b0e738d4cd37d2529dfa267255b9
-
SHA256
48b05cb20c218414d32b09a26a12403a589d061b1087ad1666da6597e9f48570
-
SHA512
59a06a533f7e8a0ac5cec69b74e1fef0968443b1eceb52a6891b142b31f73dabf7857d8ff4e0cab65c826ba0a67bf30d0856aec57abfb84192666f37e37d4efe
-
SSDEEP
3072:D4lQuqYtOhr2hvlSbBfR5YI6u2zdzmywPH4VbHVVUUUUVNfsYcJmmLeuUvnIp3mX:DYQpYtOhr2hvlSbBZXOzxJuShf
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.caffard.com.ar - Port:
587 - Username:
[email protected] - Password:
441ventas - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4848-21452-0x0000000000400000-0x0000000000611000-memory.dmp
Headers
Sections