General

  • Target

    608-82-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    f30525b84184df0fc9c7a5e25266293e

  • SHA1

    339c1ac527f582ca816ea63ba746d0b0c006b473

  • SHA256

    42be907b72c595513fcdce9b1da3beb23306ad9171003b486ec7a2815bad061a

  • SHA512

    db85205b50cdb2dd12f6f60bce6d8e099311824b53a25ce2c2409aa38bcdf7827fe1accb860142e516e1ec8e6869425c0184b4e7d88ee57d1c8fe49531c546bf

  • SSDEEP

    6144:bDthOzj8LzKQCmwqBbvBhQ6oubr+SxlGxA:bJk+QmwqZvDJbrTI

Score
10/10

Malware Config

Signatures

  • Agenttesla family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 608-82-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows x86


    Headers

    Sections