General
-
Target
3044-10-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
c5a1439f63d922670fb98d1061cef543
-
SHA1
062886546a61114121d6c1ee709516d19bc006dc
-
SHA256
b51d4c4b177c734a70862590de7bb8ff662d1fdf139630b4080db44c8f9bccea
-
SHA512
1f0680bc93bf7b7f78a791a63eef12556abc0c295f43336978be74e738090cc2be89509a10875ff14bd280b6b264edad485230d44d65ee8aaeeb2f0c3ce9ec93
-
SSDEEP
1536:XjFuvVYPmUqtiag1B2c0Oa8irak9b4mONtQKbH3/2z2Se6c8YHmDEdWzpdOhe5bC:XjFu9koGL08iuk9bTubHx8YAEdWqoO
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.worlorderbillions.top - Port:
587 - Username:
[email protected] - Password:
7&lns_)RjBs5 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3044-10-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections