General
-
Target
2168-13-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
0e52c8123775f9e5253da55582ad3488
-
SHA1
73a97d7a5af808d9eec944e6e14bdbdef1f55f89
-
SHA256
7bdb2ce1814c2705bb1141f05756b3805905d21766b2b5415693950b889b8621
-
SHA512
16fd9f71965f9033069c9683ab8859019679130603d86b7d89575ca739dc6224e6e28f679310b5db75c034c0980e37f75400f25f23bffb311df53f6fff801588
-
SSDEEP
3072:X4yZnn9b8uhiCSzA69bw//BcfPfvll2qy:DVt8KiCSzNbwBcXfvG
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
us2.smtp.mailhostbox.com - Port:
587 - Username:
[email protected] - Password:
%@pigRxrE6 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2168-13-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections