General
-
Target
2004-58-0x00000000004C0000-0x0000000001522000-memory.dmp
-
Size
16.4MB
-
MD5
bebef4d3bcc39bd7779b8aa804189291
-
SHA1
af0a50d5476cc2344313cf9d24c95d49662485b3
-
SHA256
339484021096bdf607ea7f492ddf4f734dca190419a613de8b57fa9a36c2aa9c
-
SHA512
dbb434c966b69215c631a6dcc2ecdfd7fca2b1ad11530aa3fdcb450ee4dafb6a41de9d70e764decda07547a097d3375c8b18bbe30851a1a0f1af8166675fea92
-
SSDEEP
3072:0NLmieCmq7DFibeZHtEc5eRAUPy5+iBDsAF:0NLmieCmq7DFibeYc0AqCBF
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.ardsmmm.com - Port:
587 - Username:
[email protected] - Password:
Ard2015** - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2004-58-0x00000000004C0000-0x0000000001522000-memory.dmp
Headers
Sections