Overview

overview

10

Static

static

10

2488-160-0...ry.exe

windows7-x64

2488-160-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2488-160-0x0000000000400000-0x000000000062B000-memory.dmp

  • Size

    2.2MB

  • MD5

    e0fd3b6baa824cb3a0786c272bff267b

  • SHA1

    5427357c36ef2b08f6105fde16d927391bd76b85

  • SHA256

    bfa30c74f9792015a2d091501728952812328e48c3330b6d89896514c6ebbfc7

  • SHA512

    b352ad2e36c0d70cf11d27e79ccbcb2b9b011451d7e46290644dcd9074686ca6978cddedbab690ce843ec7fb43814022c5170fe4b239717d8ce0673fabb85ba3

  • SSDEEP

    3072:zfo+aqTpEb+cxt1nOfQX4NV4f5k6/yhPrlkwESCNim0/H:zNpliPOooNVL6KhTQhQ

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.mcmprint.net
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    l9Hh{#_(0shZ

Signatures

Files

  • 2488-160-0x0000000000400000-0x000000000062B000-memory.dmp
    .exe windows x86


    Headers

    Sections