General
-
Target
952-95-0x0000000000400000-0x0000000000615000-memory.dmp
-
Size
2.1MB
-
MD5
d58cb3f5ed6bc39759fa4f4b7d27146c
-
SHA1
28feaaaf9c5faf2ec31af07a0e33948ca456becd
-
SHA256
d8fd182aea6c8285e9ef2adad9b7e99d6f16933e6ebfc8324c2c50787a123ebd
-
SHA512
4cbf2e5b3b2c5e09ed10216ca8aed7a1df2b7261f911488c9a9ffabe0bdfb5ead23e61b0dbaf7cbec849d5fc70d24dd72000136074379491e462718416cb7d26
-
SSDEEP
3072:s9BI0B6mTvRj0bzJP9zK1qT47RrbpVFqkIGreVTIr:0X6mTJ0bzJFGq0tr8k0
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.phytomer.es - Port:
587 - Username:
[email protected] - Password:
@Paqui0033-* - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
952-95-0x0000000000400000-0x0000000000615000-memory.dmp
Headers
Sections