General

  • Target

    1644-65-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    7f2502024b5b8c6a01c5b43875f94624

  • SHA1

    4ca990f405ecc4aa187bcf3fb36b6c5c1a8ce403

  • SHA256

    d35333ef5bae72ab14c9252b99e740bd4d1b6731f589b47ba1fb547efefcffbc

  • SHA512

    26dbe3b3e70943fec0189e6ccddae6b89230f65328e1bd2b101b84577fe17f9c8c59fa9477c87731ac1dc1283be04485224a6611de032d01f8597c1d9a175249

  • SSDEEP

    6144:yDthOzj85zKQCmwqBbvBhQ6oubr+SxlGxA:yJk8QmwqZvDJbrTI

Score
10/10

Malware Config

Signatures

  • Agenttesla family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1644-65-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows x86


    Headers

    Sections