General
-
Target
2640-13-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
39643222912f93fa127c9d73123ddfd3
-
SHA1
187238de280e562faba6872be2c496cfe3834804
-
SHA256
cca2661cee14878b333ff642808dc6e8d14ac7a93a1bf2a8d9c07faa23e5df59
-
SHA512
c98fcafd136fb9b43cbe49e2bf55da7fe1400ad280f45f934e1f8971117b28300f220e601bb46c7d164c1138a0b3d399032316e3a1b1f88cbe442ce4cf7d94d8
-
SSDEEP
3072:dIRlx1Jl67C79wKjxbDTxeRhkhDagDrSM6ciT5EMPii:+Rlx1Jl67C79wKjxbDTwRhkaM6ciFPp
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.officeemailbackup.com - Port:
587 - Username:
[email protected] - Password:
]2(-jARQ1V-^ - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2640-13-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections