General
-
Target
2040-19-0x0000000000D00000-0x0000000000D40000-memory.dmp
-
Size
256KB
-
MD5
19a6bee8b0fea62a67c8a4902595f606
-
SHA1
b7a0dd2cbaa9dadde16bc86d84a0b3e6d9668f4b
-
SHA256
56042840c1f54a5124fd8cf50e3b8114d48f317c56c890f3eabde04cd84c89c7
-
SHA512
145c270fee7284982a87038640b1080c9feebcad3abd7d7a05c2bba8301d02b9dccbbec9dc695c5892da788a7163987632311354ea52d3b1892c545313baaa1c
-
SSDEEP
3072:jblxVZlUPtRbJbJwrdfRdnlugvinu5FI1x2+:jblxVZlUPtRbJurdfzlxanF1g
Score
10/10
Malware Config
Extracted
Family
agenttesla
Credentials
Protocol: smtp- Host:
162.254.34.31 - Port:
587 - Username:
[email protected] - Password:
M992uew1mw6Z - Email To:
[email protected]
Signatures
-
Agenttesla family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2040-19-0x0000000000D00000-0x0000000000D40000-memory.dmp
Headers
Sections