General
-
Target
4496-13-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
72918d9f999e7b420ce283fe3bfdd499
-
SHA1
f8845a7aa9d0ac53f5ab231b5a36357bd797faac
-
SHA256
238fb95bbb823b00c10a422db08499d50b160143fc92cfae021c4d9d085bf908
-
SHA512
5bc6fbdf87acada2f9bee92487fad33e16cd4bce06f2e861153ae5fe07ce8e639333122767e66241d04d6d6c4db2af1d87b5177dac2eb1977177d4cf0fe64ff9
-
SSDEEP
3072:YGQcTIB2odEoaTebgouoaVekjwuK2DDQuQ4M0:YGQcIkodEoaybgoEbxQuo
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.spraytechautomation.com - Port:
587 - Username:
[email protected] - Password:
#Y^(&Ul?SnOynT}__@uLw#sad - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4496-13-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections