General

  • Target

    972-62-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    bafa6da8086899b247e360bd29fd07dd

  • SHA1

    7ee3bd878b4a51ec4c9bca4af3826a52af935f89

  • SHA256

    2d00f54c4d790854e48b64da6e8e8082eefc719059f4e9e474f24f8a93b2ac8e

  • SHA512

    28d1a843e1cf76bbd986a4fdcdc3607910890c2d80cbed0c6e482d9a4c67b45e0c09df8e13f04ba0b35d6f59d4681ac2d7b6785cb8a35939ee2449a5af8a881d

  • SSDEEP

    3072:0bQhMulkm2x68KrtUtCgDeDwKgPS5xcZEcmriQo:Zh2m4TvRaDLAiZjo

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot2134979594:AAFk4QkrlHlt2a-q-EhIoHZBbzxSH0QxiBI/

Signatures

Files

  • 972-62-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows x86


    Headers

    Sections