General
-
Target
1260-11-0x0000000000400000-0x0000000000440000-memory.dmp
-
Size
256KB
-
MD5
10a71cc24058192924048ccbb528eefc
-
SHA1
3d9f78a62421cbc4ed33668bf29a9bd3c310d9c6
-
SHA256
67d785b78493943d795c5f6cd8267d993e78ce4f76c50278f075473ca0cac032
-
SHA512
153be8022fd458e0b97f07ef90eae0ccc962dd218bfd25a7abf36cd01b0e8cf2f7a5982e28733e754efff08212b21b4fb08b6888928e003ed7c22885e70aafec
-
SSDEEP
6144:+m/RVplRMWNOIobXnsZfzenaS2s8Y4LRSn:+GRVplRMWQIobLaS2bb
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.adlinesgh.com - Port:
587 - Username:
[email protected] - Password:
Ghana@1235 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1260-11-0x0000000000400000-0x0000000000440000-memory.dmp
Headers
Sections