General
-
Target
1556-14-0x0000000000400000-0x0000000000444000-memory.dmp
-
Size
272KB
-
MD5
a81308e4b40654df92dfc3d1f6a3655e
-
SHA1
1485788ae9da0862e4a30aad1b91141f8e27cb1f
-
SHA256
48d3a8e8fe550b163a3927573f1641d620242a865c8e2042e982ca2ab2b64cdf
-
SHA512
8189bec930c602cbef8769bd47b8e07820f713dfda311bb40957df8a4189a4d93123aa67e7e092112237c89961a705becb644489311b1c6c4a0715729b42375a
-
SSDEEP
3072:pbVd+BwgWV5x0l62IR5C1+yWMBUdA2o2MfVyjrqEMqmFRi2jRkmA:pGP62ILcrWY2SyjuEMqmFRZS
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.quartieri97italy.com.ng - Port:
587 - Username:
[email protected] - Password:
!CirSK48@7ks9Y12,.;8 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1556-14-0x0000000000400000-0x0000000000444000-memory.dmp
Headers
Sections