Overview

overview

10

Static

static

10

1656-67-0x...ry.exe

windows7-x64

1

1656-67-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1656-67-0x0000000000400000-0x000000000043A000-memory.dmp

  • Size

    232KB

  • MD5

    7ff083a9e05de1f6bb0f87278792850b

  • SHA1

    03d1b4b0480cef7fbd647fab1cdb64505bd07715

  • SHA256

    c96bf1038ea4331073140a4636f7e7fd66102ec02d89b61790d1bede89d817e3

  • SHA512

    66b25cc9d72e4df0395c1509f9666d3bdfda247ce2c1baee04e13bfc193cd4c93aa41e3d5134c7c5d6bf11c77443feebbd7639218fc5f4360ea7c4c55b657c76

  • SSDEEP

    3072:gcR2iJ5OE7mQODsg/8xQpHadGZOhUXDDW6JD9fSS7U9S+4xNj969IhQt4:rRB6b/8xQkLUXDDWEKSb+gjmaQ

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://192.3.223.202/
  • Port:
    21
  • Username:
    ftplogs
  • Password:
    sPkZ7jK7P6aA

Signatures

Files

  • 1656-67-0x0000000000400000-0x000000000043A000-memory.dmp
    .exe windows x86


    Headers

    Sections