agenttesla | 2904-62-0x0000000000400000-0x0000000000430000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2904-62-0x0000000000400000-0x0000000000430000-memory.dmp
Size

192KB
MD5

380e0e916aecf432db858676d449aa9c
SHA1

057d7a8c8f92c280206cc39718b0c2c69ff7f9a0
SHA256

ef03748def179128834e876220547f640cc0b3bb15841812f523e3107f504d03
SHA512

e91ca99eef37d81eea31e56e9cca741115837e0f844620e7f1dc7d35dd0abac8917d421920886856ac995780aeb85e8c4bbbbbe9125af3d7d880d465dabecb9d
SSDEEP

3072:DO75Yx29A3c3xhDzy15FwOF+TcqXXQoHj9zS:Ikc3xhIsOsThAoHp

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
smtp.quartziax.com
Port:
587
Username:
[email protected]
Password:
pass@2023
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2904-62-0x0000000000400000-0x0000000000430000-memory.dmp

Files

2904-62-0x0000000000400000-0x0000000000430000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ