General
-
Target
3252-32-0x0000000000480000-0x00000000016D4000-memory.dmp
-
Size
18.3MB
-
MD5
c6f9fe256d7711a1c0509b08e9901cf9
-
SHA1
1303b92eeb00890b96a477ea4de8ced65f191604
-
SHA256
c911db73b6e6de276ab2c1da1bf0db6af047adcfe3ba2088a9d998b64199e124
-
SHA512
c86b8fece0df16f31bed9d275200acbdf313116c73c3a64be12273c992017ce8ea82f62a34bfb1a1c2fb1a0101c948bab06c63e2c384ae9cd2db4f59ec11a7a7
-
SSDEEP
3072:/xV0udZtxt7CEeDXnKUoVVQJipRoRlSSCoRfNe5DEVurGE:/HdZtxt7CV3hlSSFRfNbV4
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.mabeleholdings.co.za - Port:
587 - Username:
[email protected] - Password:
99B3st3R2023 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3252-32-0x0000000000480000-0x00000000016D4000-memory.dmp
Headers
Sections