General
-
Target
1916-77-0x0000000000400000-0x0000000000430000-memory.dmp
-
Size
192KB
-
MD5
3f403fd05bceab94cedf9225c9e68556
-
SHA1
866f99a524b3270a7a7c70131912edffbe85d3f1
-
SHA256
e4967029019b56bca528c737bb64e70819251d881184cb1adf4b75e86eaa48eb
-
SHA512
caab59507ccf8f8d77ae943bee0b88e3e908ca75c7d9015d44827a026e98bf5a5323f65299f91f312ae3e9d52307772b1422f1635390e15504314fb40fe11b18
-
SSDEEP
3072:PG/1o5GVEFx9nj1r8VWn3DjR5xf9dZRYa0ujEsxt/DwQnckuYCKFBsnVYTI:IEFxhpr0g3hXf9d8a0ujE+p8RbYPrsV
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.exceltruea.com - Port:
587 - Username:
[email protected] - Password:
bl es si ng 2 0 2 3 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1916-77-0x0000000000400000-0x0000000000430000-memory.dmp
Headers
Sections