General
-
Target
4144-9-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
8c1d83fb8bc3d8a005e15881cefcbebc
-
SHA1
db1097802b8188884832a0c63279b297caca07a3
-
SHA256
13e262cdf56be8262bc9d4ccc907a7a7336da5311e938064b4a81d752e81741e
-
SHA512
644c801b46e23e959ee01c608d2806c6140d63b7c309497d45df6540f98408a5819858e48405c615eeede0a9260c6cbe60da62de0127005564d98c0ca4116cc1
-
SSDEEP
1536:qPCMsdnFRVdLU/+ecWpTeQWIfizywO3aSPHztJ5rbghxi7yThWeIpyfBlzF29QdN:qqj3VdYm1apK5OqSPrVbzg3zFKcm4Ui
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.danjaminvestments.co.ke - Port:
587 - Username:
[email protected] - Password:
mombasa@2022 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4144-9-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections