General
-
Target
524-64-0x0000000000400000-0x0000000000430000-memory.dmp
-
Size
192KB
-
MD5
0ccceea4a1a23c8d9c599ec148f8b8da
-
SHA1
457432e7bf622fabd035d72d4ba7d2c8852d4dc5
-
SHA256
e6a72d394587bec278d4725c5c4cd49174fdbec511ae202259704255e88a1444
-
SHA512
8caf053acb5b5f606cc737468a943ef62c6c0d463ed65be30f7f72029ef41a0030a4cd095d639a823caadb81a3c0999c926cf5ce990be35acc0ec299371a0667
-
SSDEEP
3072:ene6HSnTD9T1mZuyVoGOTQ9Iu4emfA7EgHW/Z8OwWsdF+m:8ITDPMuyCk90emfA7E3Z8OwWS
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.confidencegroup.co - Port:
587 - Username:
[email protected] - Password:
hyderabadbottling@222 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
524-64-0x0000000000400000-0x0000000000430000-memory.dmp
Headers
Sections