General
-
Target
2020-78-0x0000000000400000-0x0000000000430000-memory.dmp
-
Size
192KB
-
MD5
aff1cb4e5f6db77b3ab8136259d3e97a
-
SHA1
ad293b3fbb785680b6f3541b1c1400dd86578f9a
-
SHA256
a187e4621d9ad9f9616776e0a52866c68b62413b7c6f40ba4b9aae51d200f09b
-
SHA512
fc57702e717edf6c9530e16a946a56950c0244efa002d2fd38db499a8b5e8c5bd037985abab0d783869c6ca280f7c490dc1cb2e52b6641c14ba39cc918809d7a
-
SSDEEP
3072:gfUsPkhjNPVaz7Yhia+xu/ma9XYLdz/42Lau2re:ccjLaz7YhWBUXYF/dZ2
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.chestronics.com - Port:
587 - Username:
[email protected] - Password:
]DV(A,K%8op6 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2020-78-0x0000000000400000-0x0000000000430000-memory.dmp
Headers
Sections