General
-
Target
1120-83-0x0000000000400000-0x0000000000615000-memory.dmp
-
Size
2.1MB
-
MD5
08cb15ba4301756c6c43d86ed9a9bdf4
-
SHA1
c3fcf66efea980b289c52b3bb655c8a9338656be
-
SHA256
9bf8e2d16a7ee06fec88782977633168deaa485a02d90a80a3537543950ae5d1
-
SHA512
4b6ce06ac44e6de622a073e533cf80527fa803979fd3f8bf92c9f673e46314b7ee0cf87a65dcdd38c63c36e21cffb9c61539c2d961c55c5b6c2ce41dfed30fe4
-
SSDEEP
3072:NvmnY0ZfZ38YC4h31zRIp2fhDtLXy5cvBW7:Nv2X3HV9RBfhRyivB
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.gamasof.com - Port:
587 - Username:
[email protected] - Password:
Mariana2020* - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1120-83-0x0000000000400000-0x0000000000615000-memory.dmp
Headers
Sections