Overview

overview

10

Static

static

10

1204-59-0x...ry.exe

windows7-x64

1204-59-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1204-59-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    da92b44aea096a379b59471ea59ef8fa

  • SHA1

    f0ce217c3cd29d2b9ff2113e1ebe0e2d3efe33b7

  • SHA256

    42b72fd865e366a892b7a18734122bdbd34cc1b17a9bc4fda620a45a81cb73c3

  • SHA512

    d632a587a35b340c2e7c13200535a4b4717635c6ed802a592fef5828e2bef12d307f7a065005282a6402f0926d2728b66c9a9fb6cd2707bf634b1ff0402cba3d

  • SSDEEP

    3072:YFBXhUHwCOTCqe1NHJZN8kkduXdPse76mJc/BhuDx+7kM6vDw3pT5KvC:YFBvCOTFc5Jz8Jdup8HfuDY4UAv

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6203672982:AAHFrf1mnh7CzXN1-UazFFMw-1n09O8a1v0/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1204-59-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows x86


    Headers

    Sections