General
-
Target
2480-23-0x0000000000400000-0x0000000000440000-memory.dmp
-
Size
256KB
-
MD5
9f4b578f19c52dd8c0b6d72bfb10f3c7
-
SHA1
b0e463a0b85cde3902d54561725bb47b7cd67d63
-
SHA256
a42ccb6430b3a739f436194747c512de585ca74f4500a7613cd95e9f093b52a7
-
SHA512
e68313f61f4720fd76eb4e73958ee4ee097ca332d613024b023e63d55b9cc7657f745a1164ff79cd78ef75c02b2e3ef839acbe11e60e9af850242a686a5d802a
-
SSDEEP
3072:NGgJvGyuyW9EOCb3K/Y5MwIX+P5X5B375z:NGgJvGyuyW9EOCbX1IOpT31z
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.thelamalab.com - Port:
587 - Username:
[email protected] - Password:
Thel@malab@20!9 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2480-23-0x0000000000400000-0x0000000000440000-memory.dmp
Headers
Sections