General
-
Target
2292-23-0x0000000000400000-0x0000000000444000-memory.dmp
-
Size
272KB
-
MD5
cd1850902a4059622a6326edf17e2a1f
-
SHA1
2f8f982fe2039cf558bf2a960b941c678e802464
-
SHA256
48e523554082820657b193e32e7fbcff1cba974911fb38f9fc278c4cf1312581
-
SHA512
4bf011da0d6f16f98f552bfae74ab0598b1ef23864f36601498e0383fd7af8754379cc6a43a471fe4defc42ef79906e3a7688d21e460ce93a375477474d0a37b
-
SSDEEP
1536:pvvE2E1xEXqkZtUVh+Ef93blU4W+OROntBmOra8Nmc+9AsDzZMPbaXpUIz3+SGqj:pra825f9xU4BIOC+a0m56mpH3+SGMGZ
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
smtp.resaleoffice.biz.wf - Port:
587 - Username:
[email protected] - Password:
3x$g?ehyLM}9 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2292-23-0x0000000000400000-0x0000000000444000-memory.dmp
Headers
Sections