Overview

overview

10

Static

static

10

1668-64-0x...ry.exe

windows7-x64

1668-64-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1668-64-0x0000000000400000-0x000000000043A000-memory.dmp

  • Size

    232KB

  • MD5

    3ee6fc0dad8e76e0938c8e2e1885213a

  • SHA1

    1e0e96b82f296fe8b33e031c4e86a44b6cf34fbe

  • SHA256

    e3137e6e6eaec8a0c48dce018bfba26948d4b7381ddaf1076102dbad2e160c56

  • SHA512

    83feeb8ce6d261679dce52b6c0a4b9055c1af70b511dcdac9fac1081d309b7061c30453b270667409348ffbfbce1643275cf673615f753c72a57c8830cee80f0

  • SSDEEP

    6144:OSAyWCD2hD3xsLSy1yf03TFUMSbA10N85AdmVuDaTyQXdqKKkXg:OSAyWQOfeNKD

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    %2B
  • Port:
    21
  • Username:
    application/x-www-form-urlencoded
  • Password:
    image/jpg
C2

p=

Signatures

Files

  • 1668-64-0x0000000000400000-0x000000000043A000-memory.dmp
    .exe windows x86


    Headers

    Sections