agenttesla | 1784-33-0x0000000000400000-0x0000000000440000-memory[.]dmp

General

Target
1784-33-0x0000000000400000-0x0000000000440000-memory.dmp
Size 256KB
Sample240607-stmc3abd48
SHA256 4e69f12584fbc54b5811721787b2f989887a45339637f7a523fb9e6ac8594837
MD5 0f0f9fb6e7beacfc71538c2ec62ee6ab
SHA1 419c4d5cd27a74fe12efc1de23f12b4395b197a6
SHA512 535de66702a3b4f2d6132bee8c1ff897d0d10a0e68edde3b7b66e1207d97ed72b68e0f23deb8a416b0fa508e7b78b3509d3620c8e65524f531db122401c9be93
SSDEEP 3072:iDheCmyuzDttBb66826MIbFBC69L5Z71b6t+:iDheCmyuzDttBb6682IBC69X1G
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.toyotasialkot.com
Port
587
Username
[email protected]
Password
nXx0bu%7ymS81Jdgt
Email to
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1784-33-0x0000000000400000-0x0000000000440000-memory.dmp

File Explorer

1784-33-0x0000000000400000-0x0000000000440000-memory.dmp

.exe 256KB

1784-33-0x0000000000400000-0x0000000000440000-memory.dmp

SHA256 4e69f12584fbc54b5811721787b2f989887a45339637f7a523fb9e6ac8594837
MD5 0f0f9fb6e7beacfc71538c2ec62ee6ab
SHA1 419c4d5cd27a74fe12efc1de23f12b4395b197a6
SHA512 535de66702a3b4f2d6132bee8c1ff897d0d10a0e68edde3b7b66e1207d97ed72b68e0f23deb8a416b0fa508e7b78b3509d3620c8e65524f531db122401c9be93
SSDEEP 3072:iDheCmyuzDttBb66826MIbFBC69L5Z71b6t+:iDheCmyuzDttBb6682IBC69X1G
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1960803567

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing