General
-
Target
1284-143-0x0000000000D20000-0x0000000001D20000-memory.dmp
-
Size
16.0MB
-
MD5
ee8074b79796c7cab1ed855a68f96819
-
SHA1
00da2033298047aacf927c5da91047badc036695
-
SHA256
16f3395a4ac1d8cfd2a2347a4f4693ae96fcff6baa9a7fb7071a0102974e9a33
-
SHA512
f2457d9832b79f54a1a3d829e7b26889a3370f84036c7f8f76a354085124e53c0458f06bde484633c0301886ae6fec3b958ad65ffc29b274d72dc1ece9c09f23
-
SSDEEP
3072:ylzrYE48YW+4NJUWdIw/KIZn5NEEIdRQ53nSJU+q:yl/YE48YW+4NJHiDGzIdRySC
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
smtp.jayiautomation.com - Port:
587 - Username:
[email protected] - Password:
imostatenigeria - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1284-143-0x0000000000D20000-0x0000000001D20000-memory.dmp
Headers
Sections