Overview

overview

10

Static

static

10

896-56-0x0...ry.exe

windows7-x64

896-56-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    896-56-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    39e7ae62eb3af36c73c08e6a5d7496fd

  • SHA1

    97f535a7c44944026f23cd58c13f888be56c6d98

  • SHA256

    a6fe8bfe3f7e93c571d4380e927b6b561d4f434363268657e7ea64936524a7a8

  • SHA512

    de2c02b7d178efab08d42d9381921541febd10a339b970972fd4e9000a51f856f9e9195d7aec2867e57c3145c698f657c8f9d785ad54b340ed2eed1d42904796

  • SSDEEP

    3072:MAsb6MUXbT0xxksW2z10yLYAdADULbMZtXWjpOpo8nBXMnht76DqJJ6dVen7/ZcZ:PPwiYm1UHMHXYr8BX+OuJJ6dgnjZcj

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.electrobist.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    Q?zI@^jDgQAZ

Signatures

Files

  • 896-56-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows x86


    Headers

    Sections