General
- Target 2696-14-0x0000000000400000-0x0000000000440000-memory.dmp
- Size 256KB
- Sample240607-tce34aaf9s
- SHA256 8fca8af40ee9fae319fc5ee6823aea223c7ffedc5206b977d252788374ab6b13
- MD5 0d5259afea8e554c5f92bac33a557812
- SHA1 f076e886b64358330e90c0f6c03bbf723522eed1
- SHA512 643c16e6e8dd7e1c8652ae861ce1f607f773a6b2b7465a2d8cfe69b759de35bdee22fba9c71dc775b77459e14adeca6991995e02e9bff61f7c5db07a30fa7c1d
- SSDEEP 3072:5fbs4GC+/HJ0LkX/iMDbxhSJcA+13UG5NXh18e4:5fbs4GC+/HJ0LkX/iAbDS4pUc1z
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2696-14-0x0000000000400000-0x0000000000440000-memory.exe
Resource
win7-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2696-14-0x0000000000400000-0x0000000000440000-memory.exe
Resource
win10v2004-20240508-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
smtp
-
Host
welingz.com
-
Port
587
-
Username
-
Password
G~*3]M[P~v1G
-
Email to
Targets
-
- Target 2696-14-0x0000000000400000-0x0000000000440000-memory.dmp
- Size 256KB
- SHA256 8fca8af40ee9fae319fc5ee6823aea223c7ffedc5206b977d252788374ab6b13
- MD5 0d5259afea8e554c5f92bac33a557812
- SHA1 f076e886b64358330e90c0f6c03bbf723522eed1
- SHA512 643c16e6e8dd7e1c8652ae861ce1f607f773a6b2b7465a2d8cfe69b759de35bdee22fba9c71dc775b77459e14adeca6991995e02e9bff61f7c5db07a30fa7c1d
- SSDEEP 3072:5fbs4GC+/HJ0LkX/iMDbxhSJcA+13UG5NXh18e4:5fbs4GC+/HJ0LkX/iAbDS4pUc1z
- MD5 SHA1 SHA512 SSDEEP
Score1/10