agenttesla | 2440-30-0x0000000000400000-0x0000000000442000-memory[.]dmp

General

Target
2440-30-0x0000000000400000-0x0000000000442000-memory.dmp
Size 264KB
Sample240608-sada2sde76
SHA256 f03143885a3acf063a7744ee5f6ef7ed99f2ac49b1728299e3f00d882487306b
MD5 7529100060dadb5eebb3643323634db6
SHA1 5a7a58beee08d71583abb25503e558afa8ca27e1
SHA512 cf7456b4dbd1a31b4ee1a1bdcda00cd758ef3f1258f864e6540acedbe9f393382fb59c444e4f4313f86e8af2ea692d8e9531b883bae2c34af331a18ee944e4e0
SSDEEP 3072:w3sKLLTjbIguOfzQ3lG/anpQFl2US5nJF2TL7:LKLLTjbTuOIow6mUyF2/
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
sg2plcpnl0128.prod.sin2.secureserver.net
Port
587
Username
[email protected]
Password
oc27-JcbRAO~
Email to
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2440-30-0x0000000000400000-0x0000000000442000-memory.dmp

File Explorer

2440-30-0x0000000000400000-0x0000000000442000-memory.dmp

.exe 264KB

2440-30-0x0000000000400000-0x0000000000442000-memory.dmp

SHA256 f03143885a3acf063a7744ee5f6ef7ed99f2ac49b1728299e3f00d882487306b
MD5 7529100060dadb5eebb3643323634db6
SHA1 5a7a58beee08d71583abb25503e558afa8ca27e1
SHA512 cf7456b4dbd1a31b4ee1a1bdcda00cd758ef3f1258f864e6540acedbe9f393382fb59c444e4f4313f86e8af2ea692d8e9531b883bae2c34af331a18ee944e4e0
SSDEEP 3072:w3sKLLTjbIguOfzQ3lG/anpQFl2US5nJF2TL7:LKLLTjbTuOIow6mUyF2/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1956150511

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing