General
-
Target
2216-8-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
4c4b81a7857129ed53ba36522d6eb4b2
-
SHA1
ba82b5f2a5b5c0b9ef5edae25f5da459192aa987
-
SHA256
cbd63e25bb5361d40537211738b2c6279ee5587e8c20ea29d4755d1156463128
-
SHA512
825f4f021ab06e1ac6bfb3fc918a6079201a3065a29bb9c25c6aa9b2294c210580e70c37f6b8d6cae000c4d23bd7379c7249bf6ddc58b4b6036b802dca06c9a7
-
SSDEEP
3072:bfVmieCm5EuZ4gALksbsSO+IpnDhFv35W7TqX:bfVmieCm5EuZ/ALnb3rIpnDhFvQTk
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.bresciagrameen.lk - Port:
587 - Username:
[email protected] - Password:
#S413vT0u45# - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2216-8-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections