General
-
Target
2696-4900-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
ab63e7277f1c180407c56a72dd4d5048
-
SHA1
fd22cd6b9d9eb15e93267f05c22ccacf2b4f5729
-
SHA256
474962afffb35b883e4c1aaa32b15fcc5a223e8ff202a65e3c8a18ae75bccc77
-
SHA512
ceaa546e220c51cdc809301f6d02119bae0f1337c625c3f770a62a65c78a1dd013db58a985e88d699ba87d5c231fdc86a4817beb922e9d1ef2891e01eaaea625
-
SSDEEP
3072:Owxh5JxyvOC/WrOi9jahZk8yU00YZ2I5rsGJx1V:Owxh5JxymyTMIa8Z0LZ2VGz
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.gencoldfire.com - Port:
587 - Username:
[email protected] - Password:
%j#!%z2b/?qM68K# - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2696-4900-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections