agenttesla | 2796-21-0x0000000000400000-0x0000000000442000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2796-21-0x0000000000400000-0x0000000000442000-memory.dmp
Size

264KB
MD5

2c9273a05b983cc4bcaac2d6e746e85d
SHA1

268a9d453602d30f7eb8626b8e9390c6cc9950e7
SHA256

5ea2857c51785a58dbf9252dc07a654bd2933706b32a72fc98aeef443c0cd3af
SHA512

ecdec8483f373e5188f8bd156c9a54d582b636579af261b99fa5db7bc6575540e01495f3124a5f801deaffff0b31fb82d0e7dbafec58a267561801f69f012cb5
SSDEEP

3072:7SW7FA0Ki/GrQLQb0PGXTVKGCy/cjxS5Tb1:WWZfNGrQLQbqKhKrEcjKTb

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
us2.smtp.mailhostbox.com
Port:
587
Username:
[email protected]
Password:
jCXzqcP1 daniel 3116
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2796-21-0x0000000000400000-0x0000000000442000-memory.dmp

Files

2796-21-0x0000000000400000-0x0000000000442000-memory.dmp
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ