Overview

overview

10

Static

static

10

988-63-0x0...ry.exe

windows7-x64

988-63-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    988-63-0x0000000000400000-0x000000000043C000-memory.dmp

  • Size

    240KB

  • MD5

    680fff6afe065ec9bbaf281e89c50678

  • SHA1

    d83332760398938faf1a2ee413da61d8f9769659

  • SHA256

    4de845ed731d405768aa36b839c0c4bde2ad4fb2eff775ea95be97f2a5493efd

  • SHA512

    0e9da7f44fef7006506859575d2fd9cf5deccee0232ae1b9c108193000a0b3f2f716b50a8e96562430bee942773cf10c53a7e771cb5ea3bce135251c38dcf340

  • SSDEEP

    3072:1mQs9MkENQJxb8nUv0J1NlRWXfiW3ZR5c6uxjrN163KvUAHUYUfa:1wJIU2zRWPi6Q6upRxxUf

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.hdconstruct.ro/
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    5R)XZ2Xqis2HZ7p[d6+Oe!0i^C85CQ]uD68jNN@ossy~wH-(ie^9O2(001174?skX%ouFto

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla

Files

  • 988-63-0x0000000000400000-0x000000000043C000-memory.dmp
    .exe windows x86


    Headers

    Sections