General
-
Target
2596-24-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
80bd1a2d9e2d3d40121724fa02ca5e90
-
SHA1
68fccc1f883875c246a7204f8598bf665e00be9b
-
SHA256
10ffcab4974944f3b885148e0d89cc495b068785653ebdce5d30cedcb03ffb33
-
SHA512
0b1c1da811dfd9b691a1c485ffdebf130ff4078f119f48dbfd985d785cb4f68cdec6ed4831d7e81c815a6c36fa5e9a19a2eea0d78b272a1d440b62b2d8bb134d
-
SSDEEP
3072:+wzWBDxt59hawVYmW0A6kwUCAxrDuK5+dXuIP7:+mixt59hawVpW56RA5DuhXf
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
smtp.santonswitchgears.com - Port:
587 - Username:
[email protected] - Password:
cJPF@$I3 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2596-24-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections