General
-
Target
2400-64-0x000000006FDA0000-0x0000000070E02000-memory.dmp
-
Size
16.4MB
-
MD5
5c2694c313a6487dc5f2c098aa4b94df
-
SHA1
a12d6b7ff9c3288c72d41ff30b184f1c7e46466c
-
SHA256
bd5fcaf96f6255f1d4269f2b9d1b452e43da3888a172b7b9642b1f6f4afa9264
-
SHA512
211a23cb6c92761cae3342240b4dc9df29f65c16aa09db91dd7ba23b061c282e7ff574b99554090cd9e10274f0f7af1d9c469df7b22171ba4d035b41874fada8
-
SSDEEP
3072:RxruyGC+NZ+C5hFbVwZ3lZcg1En5A4F2oKa:RxruyGC+NZ+C5hFbVQ3lZcgCz2j
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.novasolo.com - Port:
587 - Username:
[email protected] - Password:
FifVI(;%u}cVQQQW - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2400-64-0x000000006FDA0000-0x0000000070E02000-memory.dmp
Headers
Sections