Overview

overview

10

Static

static

10

1572-85-0x...ry.exe

windows7-x64

1572-85-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1572-85-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    e4ddd3f2271af30b1724f7676cef232f

  • SHA1

    95ab2eb979c810821d9c2b078d25424711f12edb

  • SHA256

    6a66466723566891cc2c10639e6deda958ef40f3cdfb1ec1fa145aeadea3ddda

  • SHA512

    9310bbfded9f6095cd52fdc5800449ea53cc88c8d6884c5909e2ef9c749acc7622c528e5d975c2e6c1f5787b4d55c693cf4719c6d516a8801b2b6c119803d6a2

  • SSDEEP

    3072:FZldnLvts0KDBFm+4duUpoM46OGV49gvcDGr0AdOzKkGAx8dQZ8QGgX3R:FZnRs0KD374duUpoM46OGV4W527GAeCX

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6065390312:AAHITY0Cpait9qz75kHoNw30slpj1yIIn7Y/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1572-85-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows x86


    Headers

    Sections