Overview

overview

10

Static

static

10

1512-80-0x...ry.exe

windows7-x64

1512-80-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1512-80-0x0000000000400000-0x0000000000615000-memory.dmp

  • Size

    2.1MB

  • MD5

    f328b2f6bce11608cc27d81018d64809

  • SHA1

    5e1b2daf652babe7b6347f6d235fbe08c5d396a3

  • SHA256

    7c6260ed77d6d85dc26eaa26ada834467d687dd9e56c8f4b21f7d021ef92567f

  • SHA512

    21a90534b1771c83b68cd6ddbfa04d43f3f2d03949757a6a76c953dc3ae0493dc7b5dcfbeb9cd458ca09b37049fdb873e51487b5bb66ffd8cb072e6758c5f396

  • SSDEEP

    3072:pDPlfzV96huF5cqAtXGNHitOPV2Rrr9yb+md9HX3ANiy/gI+ccfuIP:pjlP6hdXGNCta2RsSO9HHYiVpu

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.hitplas.ro
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    @hitplas.ro

Signatures

Files

  • 1512-80-0x0000000000400000-0x0000000000615000-memory.dmp
    .exe windows x86


    Headers

    Sections