General
-
Target
1196-127-0x0000000000400000-0x0000000000442000-memory.dmp
-
Size
264KB
-
MD5
6f6be875c69b5bf224194c6ba7916161
-
SHA1
21664f75ca6d04f8011c016cdf4b31dc5472d422
-
SHA256
541e9e8d78d9be3fac3070550b77a7efcdabc63336fe5043dd232394edb1530d
-
SHA512
1d53b48ceffec7f9ba2ef16233d561314ff547e64e52f94f7f9c25edda050282e9edb639aa0afc7dfad591ecef296b07e4d64139e8bed5b274e120d952f6521b
-
SSDEEP
3072:hOUq6tE7lMvqEClkkk2vwjlEEbkVF1G3h+cz5xwx/zM1:hOGtE7lMvqEUkkk2vwjlfWFEx+c6/w
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
mail.formosabag.co.id - Port:
587 - Username:
[email protected] - Password:
@2022exim02^^** - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1196-127-0x0000000000400000-0x0000000000442000-memory.dmp
Headers
Sections