agenttesla | 2260-11-0x0000000000400000-0x0000000000442000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2260-11-0x0000000000400000-0x0000000000442000-memory.dmp
Size

264KB
MD5

78c9ed501df910fa21755385439e2e97
SHA1

43537646b8234477160810041324f9cf9ac3c9b5
SHA256

69ebb2f2f7fd569c6b8c114a16ccbc5fdf44584b38c01197a14bcf65cc80b956
SHA512

6fc3230d31b9ffe56f8d87269814a56af4613f5fa9db4b5c299f5d96e92960880a547f3c5a028de70317e55c6308ed96a016bc31a6f2c2b28d9f7edb358a1d15
SSDEEP

3072:0S0UbjbtgSiyHE5b7YLTCi2LsWJrvD2C:0b2aSiyHE5bwmi2sKrvT

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.aksumer.com
Port:
587
Username:
[email protected]
Password:
vt(L=26g?ZBM
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2260-11-0x0000000000400000-0x0000000000442000-memory.dmp

Files

2260-11-0x0000000000400000-0x0000000000442000-memory.dmp
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ