General
-
Target
2852-1023-0x0000000000400000-0x0000000000615000-memory.dmp
-
Size
2.1MB
-
MD5
1378a430b50b5e9fb8b55928cea8280d
-
SHA1
62c554e2f4f993e8d0b11056cac5d30e9f53cc5f
-
SHA256
d98ad44c01e7398c0dd5270fdd5ce05de484585c2bf95c4bf7e3312cc0c4d4fb
-
SHA512
8d5a056585c4532e758a11f2d5f476f1e191b0c402b80f1619d8a32cae2736c8374046883e6ab1ac1362d32e374a829a3ed6614fced6e3e33625b86b9d980f5c
-
SSDEEP
3072:E6+00TePYLb67a/kcL14GhHKGhFzE1KkzitpN+4SRIVHs:q0zPYLka/kcL6Gt1h4qpk4SRI
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
server1.sqsendy.shop - Port:
587 - Username:
[email protected] - Password:
]$}$r3TcLdY$ - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2852-1023-0x0000000000400000-0x0000000000615000-memory.dmp
Headers
Sections