General
-
Target
4684-8-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
618fc4977a875d78c724d2e8cb5ced2b
-
SHA1
f593bb14a284662e83f9d22a0b4041f12b8993a2
-
SHA256
83d33ea6f520a86546bc58cd4a943a6e0b6c06b60d3b7901196271d1af001032
-
SHA512
855e97858c4f138a77c866b7f05eb4f980ad9be17f5532cf9b6afa3838aac066d44a4df71e80cb0cb0542e7c777ff715a63f01d36619451af1875bbef7f20707
-
SSDEEP
3072:/eFrmmeeWf3n/3dGmv+ZnhckMkDJJsB5cBjj5Mp:/eFrmmeeWf3n/9mZnuPcaAjG
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
smtp.zoho.com - Port:
587 - Username:
[email protected] - Password:
i f e a n y i 2 2 $ - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4684-8-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections