General

  • Target

    2604-15-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    93740e4bfa8ea6bc5bf60266430e6b46

  • SHA1

    ad2617376891c066de4b00f7c79b67487966ff9d

  • SHA256

    baaaed4f62c9118d809dc8bbb24e41c793b2a7ce91487db0fb767a57f6048a49

  • SHA512

    5e53f9cea347ca52a51ca137a19109dc5ac487a47ff63d19f25f82d3cfdd6a077b34fae593d94c785a0c43f8bcf068146716f7b43b9b803add3d01dbcdcb8cc2

  • SSDEEP

    1536:g/cPSvuOAPyNJ2t1Loz6LpoAksQ+8uNLkOGXrYRq+6RAoFg5RhRvAOwno+rjtDBx:Ccq0AC1LLa0QNu7EtsRvfxEN4NU

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://ftp.corpsa.net
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    -E~O8rekW5UT

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2604-15-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections