General
-
Target
2472-28-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
765f1fa35fad2f7f44b304bd3851d972
-
SHA1
1bd41e7e51625fd9e98e252981ae2544a12e742f
-
SHA256
4933ac7383ca0232f8657974dace196bf4bd6a7f4ee22d49e2c5f84d1cbfede9
-
SHA512
2baf024b69c6ac09c5c9234cf8ffacc95d208c20bddb3b813c5776eb045ed6e01e171fdfaecbf227e0747fd49e819a1a22a28d3544ffcfa5750248f6a61c7c3b
-
SSDEEP
3072:uW9TjLLTq8WVdPkuRDesTjtL0qsvKH5lK/lj:nTjLLTq8WVdPkuJtsS2/J
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
sg2plcpnl0128.prod.sin2.secureserver.net - Port:
587 - Username:
[email protected] - Password:
]EMe[F7b^j@[ - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2472-28-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections