General
-
Target
4100-12-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
62c098918b3da6cb4bba0b5f7688a7b1
-
SHA1
f039ffd3ab049cf861b935a71366e50fd7099f0e
-
SHA256
c4065e5a16f5a6853e594dfa42647abde9ce50704057ccd2e93634c2d0d848e7
-
SHA512
687ca8d11b8bc6764d8d641135d9d3a9a8cccdf995e5967b63515b279e179d4e393c383274cc276d394be3caa9ad052bc9b1ea148b1154bf7b4f2d3807769f20
-
SSDEEP
1536:Jj58/DU1lPRYUqrkc2w2wijJ7oVICvkvcqPeFtZFddEe0YRnzzjtFfu7yVPQJ3L:Jjm/D4lxC2wImx7FXUYRzzjXKmId
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
ns0.ovh.net - Port:
587 - Username:
[email protected] - Password:
Contact@PMG*3017 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4100-12-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections