General
-
Target
4020-576-0x00000000004A0000-0x00000000016F4000-memory.dmp
-
Size
18.3MB
-
MD5
b1e439f7e3ddeb43c30527ef26d820bf
-
SHA1
abbadb6d2794c37ae51e9bdca9329087c65b3ab6
-
SHA256
444c7e78fddd19df3d8a1acce53dabd04fa29c051cc6de5e2775e43c0ca38580
-
SHA512
5ed3810a46eb687f0b4d5305fe6e7e3d13d39fcd7657cc9ab1a4d50c9cd02a0c1641618e6aa558354a4ba7125bef006968c7886746f94de1898daa324f517648
-
SSDEEP
3072:STZ7uW+m+sIz6UAK7CnAAw2K4OQIuc5KowqNkI7:STNuW+m+sImUAO34KwlIwqqI
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
smtp.gmail.com - Port:
587 - Username:
[email protected] - Password:
kzcu xjhu gach auod - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4020-576-0x00000000004A0000-0x00000000016F4000-memory.dmp
Headers
Sections