General
-
Target
2688-34-0x0000000000400000-0x0000000000444000-memory.dmp
-
Size
272KB
-
MD5
fcfac2578c9217490e1bd0038ecdf1e6
-
SHA1
e2769172201ba6898f344260cd9a7be490d13aa2
-
SHA256
7269d881088a2ba5b1700aa24d8d9d4f19b6c2a8b4580e71012711aa620c2f40
-
SHA512
e0f15e4acf3753102d825d80ca627efe72be6e0e318977f092bd13346b200d4e90db96f87a49606dadd3cb37f283b060277f1d19cf9d6cf98ec052a2b4b67d6d
-
SSDEEP
3072:axScipZZZZszgCx7hDOsqxq7xDmo5StKgWKmsvg:kSrpZZZZszg85Os7sjKgL
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
smtp.zoho.eu - Port:
587 - Username:
[email protected] - Password:
office12# - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2688-34-0x0000000000400000-0x0000000000444000-memory.dmp
Headers
Sections