agenttesla | 912-47-0x0000000000400000-0x0000000000442000-memory[.]dmp

General

Target
912-47-0x0000000000400000-0x0000000000442000-memory.dmp
Size 264KB
Sample231201-fctdtsfa39
SHA256 68ccef9133824c4b1e384217dea43571eca8ab9264790f48677d52e6bc370cf1
MD5 354999713c19ccf1432f605aad1381dc
SHA1 6c5da54a5a3e847752606a2f16818e28f9299b36
SHA512 c89eff5162e03ba3487bc0c645bab0d521f10581573393d82a136d210f93e6e83d59503b859315b9c8665e9a9fe0acf32446bdf895d5823256112b9163a49ac3
SSDEEP 6144:8iroA0QcQs5LaamQcUDmmRJK1EfIaQk4:8koA0QcQsJaamQcC1fIZ
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.zqamcx.com
Port
587
Username
[email protected]
Password
Anambraeast@123
Email to
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
912-47-0x0000000000400000-0x0000000000442000-memory.dmp

File Explorer

912-47-0x0000000000400000-0x0000000000442000-memory.dmp

.exe 264KB

912-47-0x0000000000400000-0x0000000000442000-memory.dmp

SHA256 68ccef9133824c4b1e384217dea43571eca8ab9264790f48677d52e6bc370cf1
MD5 354999713c19ccf1432f605aad1381dc
SHA1 6c5da54a5a3e847752606a2f16818e28f9299b36
SHA512 c89eff5162e03ba3487bc0c645bab0d521f10581573393d82a136d210f93e6e83d59503b859315b9c8665e9a9fe0acf32446bdf895d5823256112b9163a49ac3
SSDEEP 6144:8iroA0QcQs5LaamQcUDmmRJK1EfIaQk4:8koA0QcQsJaamQcC1fIZ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

253310

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing