agenttesla | 1664-63-0x0000000000400000-0x0000000000430000-memory[.]dmp

General

Target
1664-63-0x0000000000400000-0x0000000000430000-memory.dmp
Size 192KB
Sample230323-fxgkrsdf67
SHA256 b0524ff28a1758286472c5af443f399ff31599127b05186c1c62281db6882906
MD5 7161bc0ed67e1cbe3a7797f0955c81d0
SHA1 4602d7c1ebbcc48fe0f81e173a4f359d30233aa3
SHA512 40653971b7c21c8092ab971c59db04241504c03c98a41c328ae12b5d9d650930a54996e5f18e5ffa2fff13031fffc29f3ca4c8029f001b490df1f73df2e347b7
SSDEEP 3072:sRBwNwkH4kpH4C1CjXQXQZ7ZPp4gykScpnkzRnQala4cIG6:sRBS4kpYYkC07Zxvo+uQDt6
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6174413593:AAEFJFfmmgKHkg-43MZw2Pt5EAT6z2Bs9Ug/

Signatures

Agenttesla family
agenttesla

File Explorer

1664-63-0x0000000000400000-0x0000000000430000-memory.dmp

.exe 192KB

1664-63-0x0000000000400000-0x0000000000430000-memory.dmp

SHA256 b0524ff28a1758286472c5af443f399ff31599127b05186c1c62281db6882906
MD5 7161bc0ed67e1cbe3a7797f0955c81d0
SHA1 4602d7c1ebbcc48fe0f81e173a4f359d30233aa3
SHA512 40653971b7c21c8092ab971c59db04241504c03c98a41c328ae12b5d9d650930a54996e5f18e5ffa2fff13031fffc29f3ca4c8029f001b490df1f73df2e347b7
SSDEEP 3072:sRBwNwkH4kpH4C1CjXQXQZ7ZPp4gykScpnkzRnQala4cIG6:sRBS4kpYYkC07Zxvo+uQDt6
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

173870

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing