General
-
Target
2648-11-0x0000000000400000-0x0000000000444000-memory.dmp
-
Size
272KB
-
MD5
39a6f7ce12c543609ece5212c5b62c7b
-
SHA1
1a6485f92ecad174921280a61e737f3e7244d384
-
SHA256
d4b4a7fac8307eafb1c597ffb19037bb382db53f3b26e40285346e4c60d1f3f0
-
SHA512
21f5056766d3b6f776863d506627078052c17f8967bc5f0ca3c8438aace19b553a9ec334653ad5b804c230dc1363b9267b20da2cc62b20c1ae9b5098f39c560b
-
SSDEEP
1536:LbdHpUhGziXJboONbrL4ojml+5V0V+gv60jxo62ga56aQkRkFDASUf61qvDqgoZS:LbdJEGUiCnLsIKvc56Q2006SZTjlhtS
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
server1.sqsendy.shop - Port:
587 - Username:
[email protected] - Password:
iM~0flYDT+Z] - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2648-11-0x0000000000400000-0x0000000000444000-memory.dmp
Headers
Sections