Overview

overview

10

Static

static

10

1996-58-0x...ry.exe

windows7-x64

1996-58-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1996-58-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    86adc22cdd3a8a751e1425e87f19f1c2

  • SHA1

    276b900949dd508c713d9644b465fc33ae298e2f

  • SHA256

    ac10a934fcd6308bdb6e48d79d91a07a4c9998bb1bd1d3d56433f3df33f64661

  • SHA512

    0eec5e78e87979d0016a0fd83dabaca3176c86f81f97df480b2a012acb98213137daf26e0a7a51d650c8593decfd4ef512534baf3f106b1c79869d247a4fdc93

  • SSDEEP

    3072:eKSUKcuTG1d7jp/KPmTBqMt0PRN7q+OX+GbJF:Pxugd7jtTQMt87AuGF

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5916574616:AAEdz_TUiYG4NJWFFHbuCokelXb7x_Hv_Cc/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1996-58-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows x86


    Headers

    Sections