General
-
Target
612-97-0x0000000000400000-0x0000000000615000-memory.dmp
-
Size
2.1MB
-
MD5
cf9d94f8036b8c1724fcd6bf4e96ccdd
-
SHA1
8e74eaa3c1c82505df631f7b2883256658aa8d0c
-
SHA256
2984b7a3855e706faea62ed647f7e232a9bfef4d0fa6dded16a63a96f3d33ce2
-
SHA512
e83cfa5817e252897088a527c5360c2bc435016821f21938686bdbf4e7e10204e221a1e3048b9e65e63ed8ba4692790a837c931c15d58f9e73a760353e2ff649
-
SSDEEP
3072:cvNgwylS0ww6n2H71KR7IIrn/kUdDZgPdVdv0:u0i2H78RhBdqdV
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.phytomer.es - Port:
587 - Username:
[email protected] - Password:
@Paqui0033-* - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
612-97-0x0000000000400000-0x0000000000615000-memory.dmp
Headers
Sections