Overview

overview

10

Static

static

10

2988-161-0...ry.exe

windows7-x64

2988-161-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2988-161-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    93822ea8e6379beda1f70f2928baea09

  • SHA1

    c104ee7b0d368444471e3e9adf993e254ff481ce

  • SHA256

    d9cc6709eb67b579daa38cbf6f67f66dad5c5735e205ffee392834ae289d40b6

  • SHA512

    4a08c5b452f19fba0d781e1eb695c3fdb6c23ab485f2a4b6483b681f4d5fe32073535226aed00e6719409cfde05338bdd9328b2d76743d5c2fe9a358fb6522e6

  • SSDEEP

    3072:Zjl/jgj0yAbLety1u4NjmZ//lETO8tfiBSgKO4d9RrB3sAgJm/Ekd:zlyAbLGotNjmN/OTO8eS53RrFZaor

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.sisoempresarialsas.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    .!LV?]FKWxUy

Signatures

Files

  • 2988-161-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows x86


    Headers

    Sections