General
-
Target
2696-9-0x0000000000400000-0x0000000000440000-memory.dmp
-
Size
256KB
-
MD5
ebda0b792a21645144be8d49cd090d0a
-
SHA1
29ce0f6578fdc3c2b9a69313a539eb1c06d1a16d
-
SHA256
4de551dde4f90f75430b94fe2270cf7ae3e29adca6a922ee48acebecf0dd89ba
-
SHA512
92cc82cc261a3df733098f19eaa751f5a76d96fd1d6fcd5dbb1099c2b8af61657009a11dfec93ae346445036088d2d6d2ed66540caf15e2474b9fb0788487ee8
-
SSDEEP
3072:pM0jj1JlxgD6nuM2psDbnq5M1Rr3k5GtLFHs:fjj1JlxgDvM2ebqKr3/LFM
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.wxaumn.com - Port:
587 - Username:
[email protected] - Password:
vK#;YEBp^U&v - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2696-9-0x0000000000400000-0x0000000000440000-memory.dmp
Headers
Sections