General
-
Target
980-74-0x0000000000400000-0x0000000000430000-memory.dmp
-
Size
192KB
-
MD5
d3f101760bf4f989ad1e2d9403819c2c
-
SHA1
a606d13342b7522fe8e1919d6babdf9fc1861bf6
-
SHA256
a14ed7d81063b5c05f39cab6458e46cbd41897723a58c640864aed3acafc1233
-
SHA512
c5dcafe1e3147b2ca02eb873c17b3b082fbd5cf5d57cde8142fbba836c7880ee54b90c2b6e90fa7b869001ce469f926a02cb66f6b20e874aa2ef669e269ebf15
-
SSDEEP
3072:0uBe5QVSPR+JK/psYedc24kCPJawaWrJkx3bGu:kQVWEK/p5kCPJawDJkBau
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.steamd.in - Port:
587 - Username:
[email protected] - Password:
Purchase321@# - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
980-74-0x0000000000400000-0x0000000000430000-memory.dmp
Headers
Sections