General
-
Target
2768-9-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
cea94d618c3986c59efd69afeda19719
-
SHA1
c33564d433846083c662df4ab0109ade950f5144
-
SHA256
7472a986f35181e69b80487d3db72602e1ad534936d2b5b4075b9bde8b3cbed4
-
SHA512
1fa2454381794bcef670b5a3eb6b94da8bb1fb9a3b27e54237dbf3ab9b96a914a7eb061851d33d92d33ae06f78a745c41428d2d81e9ab6a0ce3a034e82894fc6
-
SSDEEP
3072:tB/+N3xVpFhhVD8EgZ77NI4FQ+Ceb/5fOSSYV:tB/cxVpFhhVD8EgB64FQdebB3Sa
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.amtechprinting.com - Port:
587 - Username:
[email protected] - Password:
!_ZSDk!#$;;V - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2768-9-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections