General
-
Target
628-63-0x0000000000400000-0x0000000000430000-memory.dmp
-
Size
192KB
-
MD5
0597e28abd0e974a8458737047417964
-
SHA1
a49cfd6bd2e7cb24dc6ca5c160db8a679d283530
-
SHA256
1b64f60129c90fa9f15dd4c4b78fb757bbb1753a080f851abfcdf44062ab967f
-
SHA512
a5a17d70d1a66b34e0dcd8e9e9e573bd3bdd7e8ddd1a6f57c7f1fde4e91a04cf5e584e35e49bb97f188e20cef6e39dd3d42fb6c23c315021bb58f55a43341609
-
SSDEEP
3072:EHlieLeNq1xXGUppnouaCAZ/f2Sr4oZ9H8MVtJJPqQ:o7x1xlppno2IHUWz5J
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.exceltruea.com - Port:
587 - Username:
[email protected] - Password:
bl es si ng 2 0 2 3 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
628-63-0x0000000000400000-0x0000000000430000-memory.dmp
Headers
Sections