General
-
Target
580-122-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
736a9ba97288c504dbc1d6fb6c2deff8
-
SHA1
c6c9264ffac68ff2ed11741a49d6cae861c5d560
-
SHA256
ad5dc5f43db57d4f9b5de06341b38e48c6541cff4e2198982cdcc5e7d284ec15
-
SHA512
1f747ee697cb645bcf0cb34bbcd49237d8c2d1969ca188b9e0ccc3e3eaafe613d18c428065c522b922be0a379146943b8e9f2a6f0c2dff08b5f5ee170c47c5ea
-
SSDEEP
3072:AGGctcOF7Tbjr0qumaqojPQsGf6LxMrdt15uW6e7J:Arctz7Tbjr0quLVV39Mrvb6u
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.fosna.net - Port:
587 - Username:
[email protected] - Password:
F*juq,;bg*)v - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
580-122-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections