General

  • Target

    2204-140-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    ac1f606a67187f6bb5900f53e774e2b1

  • SHA1

    18fd035da3e5076c237ec961e6ae9a304b6093fb

  • SHA256

    6904a424ac4cca5f15f1c99d4901614b1eb1fe1d29a11382a23c71c1917fcd4b

  • SHA512

    8e263a030405431209ae5a1b0b87599b7d5443862d9e79a7e708d8f1c5363cdd65a71248cd5b2f5a5ec64c792ebc9272dfb5688d34fc8a160955e2692684cf19

  • SSDEEP

    3072:og1J9mKS20Da61Qdrj21pNo52ucM5VC5SBh9qRgM:og1mg0DQxjfRD5ls

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6205694016:AAFra52NaS7UwXdNdP3UoFHG1Y79jlGWBko/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2204-140-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows x86


    Headers

    Sections