General

  • Target

    588-56-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    1065508ffcb9071e90d4d687661404c6

  • SHA1

    3a5d7916c79c18f6018151ec20f652c7e0d7a099

  • SHA256

    2adc0313821441986b38ecee807c2a4bf6dd91e0061839e98f513502004019e5

  • SHA512

    9815a948525cf9c2058a70214c55df55d11cae8a60cc8bd3f1d8dbfa6d9739df92f90859ba6b9f85aac8bbc9ad1bbec9c528138e80d79e307b3860d29feda5bc

  • SSDEEP

    3072:0bQhMulkm2x68KrtUtCgDeDwKgPS5xcZEcmriQor:Zh2m4TvRaDLAiZjo

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot2134979594:AAFk4QkrlHlt2a-q-EhIoHZBbzxSH0QxiBI/

Signatures

Files

  • 588-56-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows x86


    Headers

    Sections