General
-
Target
2708-9-0x00000000066D0000-0x0000000006712000-memory.dmp
-
Size
264KB
-
MD5
cebc78dd06a361055153bb356dbd6ac5
-
SHA1
819f87b59ed551c58658dd5e9be7198489ead714
-
SHA256
89a25c6a1639531bfdd19ac2405aad5d6b1d9ffa26756cbe147bb3e72dfba91b
-
SHA512
be34325a17541fdb2f5adce92abcc9bf9c3e141ec8a2019582f3f5da6fbb22dba00a5b5bad7f7bfe17ed7138b9e6dde405f50367bd79ebcfa7d0f9b4524936d7
-
SSDEEP
1536:JlfLaMIVKKIt1Vjg4DxlxufHfnygQsDlFD4XJrU4EodILIH4LoJaIrs9dCdX3:HLap5I9jRtgLRFzWdIy48kIoPU3
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.amtechprinting.com - Port:
587 - Username:
[email protected] - Password:
!_ZSDk!#$;;V - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2708-9-0x00000000066D0000-0x0000000006712000-memory.dmp
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections