General
-
Target
1644-26-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
6f147c5ceaf5c8f7a3b542fe30e6f5e9
-
SHA1
1678e0b0a362c612c4a445c72cd0cfdc2b2a0ba3
-
SHA256
533e7f68543b14330fd0a2416c3483b9e7f657b36e5dfd0766054138c3dd298a
-
SHA512
319cb72065598f7f0d07b27133b54335e15542687646f73834b980c0959e0991bcf5beb199a96fb29b0d58edad3497af97db0e6b78617a6c7243baa127eedb3e
-
SSDEEP
3072:8WM3tUM8UE9zWzkiBu2yyn71ZC0XIAUJ5+qRAkV24:8WM3tUM8UE9Kgsb7S0XIJZRdV
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
smtp.gfs-ld.com - Port:
587 - Username:
[email protected] - Password:
@WlgG%V9 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1644-26-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections