agenttesla | 2228-244-0x0000000000400000-0x0000000000442000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2228-244-0x0000000000400000-0x0000000000442000-memory.dmp
Size

264KB
MD5

7bce723d19f138800435544bd59d7c9c
SHA1

b1c536498c74d365f77ed31dbf854961320f973a
SHA256

3447a8c4f42f51125e92e46b1f0d8a7127d8ee9b19d94a50496559fb5ebacb83
SHA512

cac533e6be0f5e73b0bdd5b2296c601f4e92d424c487f394d7a1fa2aaeff1a414616aca8b018622705bf8199cfc9114a1a69f1a7a28544a093363435597d7a6d
SSDEEP

3072:OlS3nNn/vXnuUWtvffzdKt0fNVMk5Babvr59JvBbsDn:OknNn/vXn8ZfB4M9vabvdvBo

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.supplyvan.xyz
Port:
587
Username:
[email protected]
Password:
Ifeanyi1987@
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2228-244-0x0000000000400000-0x0000000000442000-memory.dmp

Files

2228-244-0x0000000000400000-0x0000000000442000-memory.dmp
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 235KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ