General
-
Target
2500-26-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
bc76dd7f80aa466186186ccc9900f508
-
SHA1
33497e79badc0b2f45291ae7a670eecf15dc90c6
-
SHA256
22a8e3ded6753649c483324e9d8d6dc641fe10343461dc3ec0784d38ff91d2e1
-
SHA512
9a47d87708c063218d32843b94c87ce0061ab67b046cf3846f1303aea11ebef7042d24617fa4b8f876aa26dd5a545ee9e79c2b8fb5a7d635f71bf444c073ff27
-
SSDEEP
3072:aEwpoxQFcdeuci0jcHJ59NAmqkoYd3QZg206BEQ:aEwWeuci0j2J5rAT1YVQZg20/
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.taxrefunds.co.za - Port:
587 - Username:
[email protected] - Password:
0p76577n46 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2500-26-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections