General
-
Target
2672-145-0x0000000000400000-0x0000000000430000-memory.dmp
-
Size
192KB
-
MD5
c1de6f949edcb05e062a5a53075e12a2
-
SHA1
ab8df1b4c84f21f46795bfc19227ce8d68140fe7
-
SHA256
f8d28d27ee8ec5d3be6e9c29444ebadb154d9582473ed0f13c0d176d71f4fe43
-
SHA512
69795eb9a1d723fc6e388b88114d27f364c4ced58f3749750e9d6534dace305d1d5a862a5f6b3d346eb0c78cb15509803a580723ca5b5991e425e10ba9bcbbfa
-
SSDEEP
3072:aUecXjmSw6j50A0vFKsWDQgvJysK54zPTz2NC57c+:zmSr50A0vg9QuA54zPTCNC5
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.montrealtc.xyz - Port:
587 - Username:
[email protected] - Password:
gody3Xp@#$*^23 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2672-145-0x0000000000400000-0x0000000000430000-memory.dmp
Headers
Sections