General
-
Target
2552-20-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
0439d719c0514ce6b8caeae2eb6df03d
-
SHA1
785e688871f2e5687b904d25d7fd91167ab4b96e
-
SHA256
1da3f7efa698fb9e73678a0e1a71584899d57a1736beba782b8cf4d59bd710b0
-
SHA512
68404524f02b6996cc16a4dd30a1e083b40a3e11e6ed4f909ecadf18c433455b5521ade4e58149db07c4bd1ec0627c0401a594be98b60bca851d1b1fbff6974d
-
SSDEEP
3072:kcWxi2hnHpLCiTDbL9d/PmFCrkMQe/qzuN5Z4OESM:+i2hnHpLLTDbL95OrIhhPE5
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.seawaysfreight-bd.com - Port:
587 - Username:
[email protected] - Password:
04@AjG%sFl# - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2552-20-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections