General
-
Target
2412-4904-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
dc90563d549ff56d9045298f1ec73331
-
SHA1
24891e5e3e78ba088d52fd07aee25016aa6b954c
-
SHA256
54e6785198c450e136b20a194bda91f980facdc4a933876c8e438ae0a3f79cb8
-
SHA512
128e5710ebe069d3a2375284b1d962433275d6f29b25246014d744c34e5396499a34840e4f730130e30004b0f0b610c1f881da8832e06a7b4001d37e247879eb
-
SSDEEP
3072:rwxh5JxyvOC/WrOi9jahZk8yU00YZ2I5rsGJx1V:rwxh5JxymyTMIa8Z0LZ2VGz
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.gencoldfire.com - Port:
587 - Username:
[email protected] - Password:
%j#!%z2b/?qM68K# - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2412-4904-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections