Overview

overview

10

Static

static

10

2252-6477-...ry.exe

windows7-x64

2252-6477-...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2252-6477-0x0000000000400000-0x000000000043C000-memory.dmp

  • Size

    240KB

  • MD5

    2167f8e8644996a9389244a855465e00

  • SHA1

    9c07c8bab03b5d81c68f5fe898925feb299414cb

  • SHA256

    a0241bda3fa4967175e287eb4a15a1269cc98d3602e17858e63c68cc90262a16

  • SHA512

    a2f1d4e26559a0fe3b4d69f3a205f8ddf0024d11b7f113eb5f5dfaf6b231781a0982c04fed44fa79da08d8613bfca5c6c6ffab3d0b557c0b3b736514301ba66f

  • SSDEEP

    3072:NTnBnKZy1jinp5LvIUHABDBMrePj7F5UKnMKNufFUyh5P5//m07ZXS+cRYUpDQT4:NjBnhmnpVOWgnUkMnzhl40JOKzN7zeg

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://192.3.223.202
  • Port:
    21
  • Username:
    ftplogs
  • Password:
    sPkZ7jK7P6aA

Signatures

Files

  • 2252-6477-0x0000000000400000-0x000000000043C000-memory.dmp
    .exe windows x86


    Headers

    Sections