General
-
Target
2984-302-0x0000000000400000-0x0000000000615000-memory.dmp
-
Size
2.1MB
-
MD5
d360cb7793300257575d2a3a729dde86
-
SHA1
6b15ae2905d4a0d976bcbb7ae2fbd6b07fe67d70
-
SHA256
97fb6803e9aa4e65286183042695d2ca290ae303141ae4a0d538d162cbd82b88
-
SHA512
ac8d2db7fc1d10177872a2d758d1c4eca8829f355aa6611288c9ec8466059b87d2b5e997e134b881095b1643b395b89b518717beaeb2f1e5c769f49e034b62f7
-
SSDEEP
3072:dUh99jtwoN64tT/TNj3gUlMP9fhDiNxGn3jMZ2Vko:qhjt64tT/TNsb9fh40w4
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.sixonslogistics.id - Port:
587 - Username:
[email protected] - Password:
51X0n5@2706 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2984-302-0x0000000000400000-0x0000000000615000-memory.dmp
Headers
Sections