General
-
Target
2456-14-0x0000000000400000-0x0000000000440000-memory.dmp
-
Size
256KB
-
MD5
6e0957f2341d1bcd7e507306e52c6ca7
-
SHA1
f35c01ea419f62eaa1e4c86ae780b7d24930ca57
-
SHA256
91da7ea509becfabd5a9631f3990bb05f104ae67f38e19e6efb2b4718a650516
-
SHA512
64beacfe2dc8a07749ec0cd7301b12fd4adc58902f0dce51f3ba6eb1577a74c87339533fa73aed1e6bccddd03eca1befa0c5ebb129556c378c0aa0dd69c01a49
-
SSDEEP
1536:tRjBvfoTymixFhwhX2Pat/JuqubblCKaIALBRqvWaw+0jaSG59J5jKIl9J6I2Poa:1noTymixkhmPGrubHTarvG5voIl9k
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.armos.ro - Port:
587 - Username:
[email protected] - Password:
NFVFAmBj - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2456-14-0x0000000000400000-0x0000000000440000-memory.dmp
Headers
Sections