Behavioral task
behavioral1
Sample
2276-17-0x0000000000400000-0x0000000000442000-memory.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2276-17-0x0000000000400000-0x0000000000442000-memory.exe
Resource
win10v2004-20240802-en
General
-
Target
2276-17-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
4be22d1ed775b4f1626547b0768ab458
-
SHA1
0061d28422b5dd41bfc107e78e66e7a3f3c60c6d
-
SHA256
09c09bb1494f0a093df85b3b3cce9d8fa456852c8013bcfde4cfe14c3d2c4ee8
-
SHA512
e6d1b1245ccecd130d964d654875dba299e468a600fd99ea4acffb87c4465b8693924a4593b09b57e4c1c489b3d5ad3395af4163a51a436b369ec02581e022ae
-
SSDEEP
3072:K1yW+m+2hFiUQuV1usUgImh7lAyiU3h8USp5utI5CIi:KgW+m+2hFiUQuqyFh7lhvSUSwIUI
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
smtp.strato.de - Port:
587 - Username:
[email protected] - Password:
6M9L22 - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2276-17-0x0000000000400000-0x0000000000442000-memory.dmp
Files
-
2276-17-0x0000000000400000-0x0000000000442000-memory.dmp.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 234KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ