General
-
Target
2892-13-0x0000000000400000-0x0000000000474000-memory.dmp
-
Size
464KB
-
MD5
fc346cdad5b9d2a864e13450fc2e8e71
-
SHA1
3a3e7112fb1201ec6af7e3762150440ccf059af9
-
SHA256
04685ed4962fc4a5249ec9473b625894bcc00aee95a853d7889002bc159bb847
-
SHA512
4d13cb2e43c8b73c6e63f36e39fa268c264db93ab4c4c88a7c7fc40375eba9b54777e00c03311a3bd5f92156f615cfd350f7d648f4224eaea73ae28d1555a765
-
SSDEEP
1536:4XngU6766YzRkCCRSvF6dTWizqbHROom3F5i5gPm5Vtz4u9Cjh5tFffME7Pa7U9D:4wU6G6+nIo5xCjbffMaPkxSSkMCF
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
webmail.mdist.us - Port:
587 - Username:
[email protected] - Password:
Jo#4321 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2892-13-0x0000000000400000-0x0000000000474000-memory.dmp
Headers
Sections