General
-
Target
1988-24-0x0000000000400000-0x0000000000440000-memory.dmp
-
Size
256KB
-
MD5
8d64d363dd721942784ef6c350a4ef66
-
SHA1
6e85431645bb1ca79033c4a13096d6cd9036c9a3
-
SHA256
efa56d6b5e755d5423259080ec96b40125d5c4be3b9acddf0d1cee134d0b5b9f
-
SHA512
009d32102fb2c5e22a3b4c4716a74a316078cff97cf75c933c63ad5164417a6a6398157531fd5199b89e93e5430b0733b2388ac0921813c6ba10bcaa7a81bb63
-
SSDEEP
3072:SD6wfeCmyRAfJqub7AADOjUgjkin5nwmMov1:SD6wfeCmyGfJLbs5j9oi9ME
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.kirpaagro.com - Port:
587 - Username:
[email protected] - Password:
***kirpainfo@123 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1988-24-0x0000000000400000-0x0000000000440000-memory.dmp
Headers
Sections