General
-
Target
972-63-0x0000000000400000-0x0000000000430000-memory.dmp
-
Size
192KB
-
MD5
99521d169873b53fb6ba615884816d0c
-
SHA1
d91fe4e037e7de478058e8e2218817ec1d2c9b6f
-
SHA256
b09ec0bcdba11fcaab33bac83c89cbf4eea4386eaa81418f198f0733a264b8d9
-
SHA512
3e3742ebeb4840bd3eb57b7b4cd73fd921e8b8bca4319330f7e8eb11b875c1a3d1d845e62c0704eb023ee0563cc5acbdf4848055f0f6f0bef107c39ce2583072
-
SSDEEP
3072:eI9lTyZ74BJAitaiiTA8AheAAt7pZqN+rv7nBD7nPZ:1uZUBRtaiiTALe7pQGv717n
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.point-s.co.za - Port:
587 - Username:
[email protected] - Password:
Ra$hid#0001 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
972-63-0x0000000000400000-0x0000000000430000-memory.dmp
Headers
Sections