agenttesla | 2336-18-0x0000000000400000-0x0000000000440000-memory[.]dmp | Triage

Sharing

General

Target

2336-18-0x0000000000400000-0x0000000000440000-memory.dmp
Size

256KB
MD5

e73f4f4b3c3ae3c3b4c702c40a47893d
SHA1

10ac30084f2e564b6b726609057cb2968d9cab01
SHA256

72783610555bc31bf485de90961f2c942f5c7488393c3bb23ae24c2868e1a4f5
SHA512

fad00337eaf6021d5573bc317afa7116a68fb483af90c8291e73df07c7b14829bd9bdcf6c45d123852bd3dab2bb2542b5f7778d573b5b41e847c5b3c7281c82f
SSDEEP

3072:aTmyuyGjp4zDmbnSpQiCa0tifqcg55ZkO3B:aTmyuyGjp4fmbnStCa0IqcGkg

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.confidencegroup.co
Port:
587
Username:
[email protected]
Password:
egITwZxo6+06
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2336-18-0x0000000000400000-0x0000000000440000-memory.dmp

Files

2336-18-0x0000000000400000-0x0000000000440000-memory.dmp
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ