General
-
Target
1048-23-0x0000000000400000-0x0000000000440000-memory.dmp
-
Size
256KB
-
MD5
878032b1ef8110ccce100ba643818a3b
-
SHA1
0ecbeaf0f4ce55ccc30b8f5919d6b6a513e9aadf
-
SHA256
fd2e1037c827a19d548ec6b30e62d6a2f71874bb4c991b73b0260729d9abc5b9
-
SHA512
8f6e12de87934d0b2cdd7bb535ece86c755ab0382cf8366aa90d01f432ab663e2540c0f3654e415fecfd8811108a1e0d13310171ae67fee594624876c53e01ed
-
SSDEEP
3072:tGyuymjzuR1sjbM8IYoLCaFLupL5wpaVW/:tGyuymjzuR1sjbMIomaFqpuak
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.sofahaus.eu - Port:
587 - Username:
[email protected] - Password:
Conobo13$$ - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1048-23-0x0000000000400000-0x0000000000440000-memory.dmp
Headers
Sections