General
-
Target
2168-15-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
951fef08099d5c664b8bbea750aad612
-
SHA1
fa1ec3b84e526f7cc1f7707274026536a2bfadae
-
SHA256
c6a3db6427a12b48a271133dafd4c1e22e827ebdbbae92aefcce66c98011bb54
-
SHA512
6bdae87bdb14c164e30509f7c2d04e8fd8fae985e0985725b82ddb93eec979cce01205892f22a157e89a8aa6eb9094f08ffeb252de0dbf7bcf445cf22bcf99b8
-
SSDEEP
3072:1iieCmytUn2TcPabGjcImg//HJ65I3+Ybt:MieCmytUn2TkabGjcIx//HJ1+W
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.sturmsgroup.com - Port:
587 - Username:
[email protected] - Password:
]rRHBHP99u|zXVEo - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2168-15-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections