General
-
Target
688-66-0x0000000000A00000-0x0000000001C54000-memory.dmp
-
Size
18.3MB
-
MD5
6298c0a50b7e1f2af2ce6cba2c9ed8de
-
SHA1
98f8ea9c998289e9567cd7cbf58442478bf7b044
-
SHA256
9a121ce2a9403b36cee8855bd31cee1f4ffd04fb5acd93bfd323933a18a87452
-
SHA512
44f50bbc1d5dca4a4e49171845b4abf0fb92ef5a48a9408729a71482505f09b73e01901827aa88a1e677e816ae30605107745e83de7eae5815ec3acfc33342be
-
SSDEEP
3072:zxya9+aG6deqAyHP3UkQGn/NALMv/+il5H0Tj51Y:FL9+aG6deqZP38aya/+i0Td1
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: ftp- Host:
ftp://ftp.rusticpensiune.ro - Port:
21 - Username:
[email protected] - Password:
hr,d@KUwa5llI%*RNL^J]g%8I;!;_Ne#G1h~lE!*86DAAD6#iLm$x)r+e1z$p+_Q,4_(f!};B?vD!IG?NqT[zOHNr6_nww[S]V?MlcYSt_QO
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
688-66-0x0000000000A00000-0x0000000001C54000-memory.dmp
Headers
Sections