agenttesla | 3944-4998-0x0000000000400000-0x0000000000442000-memory[.]dmp

General

Target
3944-4998-0x0000000000400000-0x0000000000442000-memory.dmp
Size 264KB
Sample240607-sv96hsbd68
SHA256 ffc00972f8f0bc783ab2405b0eb28405fc8a52efa5762af3f13b85689046c972
MD5 77970de61ac6ff05b1431be5ba2a8c7c
SHA1 ac810ba55dd51641a50ace6274e657fbf227180d
SHA512 4ba08aad5607b362dc2c1ac7fc2a92eb1963da138586ae62e9ced88c84fcf1061201c00f9640afe45891e5d1efeb65ff5ff93f95e2aa8fd07bdce6e3d2a16231
SSDEEP 3072:4U4ZBZx5SkX/kiCasQO2UtcBDPOd0gnhjM5eGHEyRD:4U4ZBZx5SMkh0O23DPOd08hjEHL
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
gator3220.hostgator.com
Port
587
Username
[email protected]
Password
RaF5@@ts7^^!@San@<!!
Email to
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3944-4998-0x0000000000400000-0x0000000000442000-memory.dmp

File Explorer

3944-4998-0x0000000000400000-0x0000000000442000-memory.dmp

.exe 264KB

3944-4998-0x0000000000400000-0x0000000000442000-memory.dmp

SHA256 ffc00972f8f0bc783ab2405b0eb28405fc8a52efa5762af3f13b85689046c972
MD5 77970de61ac6ff05b1431be5ba2a8c7c
SHA1 ac810ba55dd51641a50ace6274e657fbf227180d
SHA512 4ba08aad5607b362dc2c1ac7fc2a92eb1963da138586ae62e9ced88c84fcf1061201c00f9640afe45891e5d1efeb65ff5ff93f95e2aa8fd07bdce6e3d2a16231
SSDEEP 3072:4U4ZBZx5SkX/kiCasQO2UtcBDPOd0gnhjM5eGHEyRD:4U4ZBZx5SMkh0O23DPOd08hjEHL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1951038703

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing