agenttesla | 2524-31-0x0000000000400000-0x0000000000442000-memory[.]dmp

General

Target
2524-31-0x0000000000400000-0x0000000000442000-memory.dmp
Size 264KB
Sample240610-xe9l9sweld
SHA256 fb898ec198d81c5af47973014b5cc45dbf4d6e8f52a5b497db57b59b96c27211
MD5 13e9d8c4c44eb3b3ba61460a2bb6b4fc
SHA1 d63f5de9298fc0b93e613b4e30b0a1bf8ac16697
SHA512 d6ffb996796f7a2d84faae4984198e5919c28e4cd9229108a9be557942e04a249a1afd15ca3b119258663ef8e0e2ee389032f849db83d0bbc4d326f130675df9
SSDEEP 3072:YiMkms+Lta/F/kE0kk4jx2lHn8Q9pMRGdL55+8MD8F:Yxs+Lta/F/kE0kk4jx2lHV3wOLHMQ
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol
smtp
Host
mail.tajhiz-gostaran.com
Port
587
Username
[email protected]
Password
Ohv@dRNG{N^grViQHl
Email to
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2524-31-0x0000000000400000-0x0000000000442000-memory.dmp

File Explorer

2524-31-0x0000000000400000-0x0000000000442000-memory.dmp

.exe 264KB

2524-31-0x0000000000400000-0x0000000000442000-memory.dmp

SHA256 fb898ec198d81c5af47973014b5cc45dbf4d6e8f52a5b497db57b59b96c27211
MD5 13e9d8c4c44eb3b3ba61460a2bb6b4fc
SHA1 d63f5de9298fc0b93e613b4e30b0a1bf8ac16697
SHA512 d6ffb996796f7a2d84faae4984198e5919c28e4cd9229108a9be557942e04a249a1afd15ca3b119258663ef8e0e2ee389032f849db83d0bbc4d326f130675df9
SSDEEP 3072:YiMkms+Lta/F/kE0kk4jx2lHn8Q9pMRGdL55+8MD8F:Yxs+Lta/F/kE0kk4jx2lHV3wOLHMQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1958444271

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing