General
-
Target
2688-10-0x0000000000400000-0x0000000000444000-memory.dmp
-
Size
272KB
-
MD5
9091a5fc076ed66c9fc42ec4597c0c90
-
SHA1
0c6977c2386fed3433e110bed1cc94d4a38867a9
-
SHA256
fa1a0e5ed4b5030e2ad577f4ce8ab25d43de1202d3632b7f9ae786916b27ff9e
-
SHA512
fe768b9c0d0e39fbdf68dee714617f1d5636470a47f64f4365f2d5fa1814a567dc1b2545289fd6ead3eeec3918bc8ff9e7429236cc07f635b500be752982a481
-
SSDEEP
3072:6effsds6JncfGlMk+aaXg5md6DBDRBGMUxA1/zNA7K:8UfGlMkvaXg5AuqxA1/67K
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
server1.sqsendy.shop - Port:
587 - Username:
[email protected] - Password:
}_#Y{Eu)2qWJ - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2688-10-0x0000000000400000-0x0000000000444000-memory.dmp
Headers
Sections