agenttesla | 2644-14-0x0000000000400000-0x0000000000442000-memory[.]dmp | Triage

Sharing

General

Target

2644-14-0x0000000000400000-0x0000000000442000-memory.dmp
Size

264KB
MD5

27ea93973bb8ef73d18d427e0027175a
SHA1

c79fbacc05addbdda35d1a300fc5c4761e489544
SHA256

2972a032683d74266b8f15b21bd0cdafb9dbe76300212da631b38924c9bfd9a4
SHA512

e67a9195dc0ff04eb7de8709f74b8dc30d41310aef03dd05b92923eb42f7d0e2a9feb60cc25a238bc4e360846d5ab8a1a362d6f9c0d49192d2a184093967e1d5
SSDEEP

3072:GmzVjgqsxtpdq+wIsmVtNgpn0pE2JIlR/Y9KJj5JGMnlbVM:TNsxtpdqxIsmPNgp0Wl9RJnNnJV

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
smtp.hostinger.com
Port:
587
Username:
[email protected]
Password:
Johney11!
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2644-14-0x0000000000400000-0x0000000000442000-memory.dmp

Files

2644-14-0x0000000000400000-0x0000000000442000-memory.dmp
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ