General
-
Target
2956-4905-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
8943c46947dde35a26058797e6eb6179
-
SHA1
0808288b2a2f9e41c439f3365ecca9970a06559f
-
SHA256
fb4227278a64729800e598741785a20687a4b0dea4eb7e9fe7f4c6555cb2c9d6
-
SHA512
5e9640d89d5d4f039fe16ea2dfedea2d651d894cea6aefbc2fb3b8113d8b947d44c32f111ee8e395005cdf171134212acd81f996082dcd49e3b59889ec3b39f2
-
SSDEEP
3072:6wxh5JxyvOC/WrOi9jahZk8yU00YZ2I5rsGJx1V:6wxh5JxymyTMIa8Z0LZ2VGz
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.gencoldfire.com - Port:
587 - Username:
[email protected] - Password:
%j#!%z2b/?qM68K# - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2956-4905-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections