General
-
Target
180-146-0x0000000000400000-0x0000000000430000-memory.dmp
-
Size
192KB
-
MD5
5701d92238b388f9a0ef5f98495bbc2d
-
SHA1
3504136755620e62b6eb4c76b809ac62fd7c5747
-
SHA256
11fd0a6bd8af66efe7a9ab471094bd9d04fd27d62e44cded0c7f857dfc79cdc2
-
SHA512
6d525c352f04f53bf631baabf9b36027d2ee424e8607c63a62e6c38943e682b5b5cfd91c1a0f3208a51d1ffa39f4aab5f53f222c9879971e5ec5a9750b52e40e
-
SSDEEP
3072:zG4DbA1mu3OfK2bp8c8VLR7J6j0AN9jCHGqgc0nM4j/Vbf:i4Qmu3N2bp8c8VTgNS0p
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.grasscarpet.ae - Port:
587 - Username:
[email protected] - Password:
,fv6mMX}%+(h - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
180-146-0x0000000000400000-0x0000000000430000-memory.dmp
Headers
Sections