General

  • Target

    1652-65-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    2bd66a71e24c9f2f61819148bb09a2db

  • SHA1

    2b700e3ceb6e34709b57256db70c72b258f98104

  • SHA256

    c5db36317d5e78f3cd0f37f56d3df46751dfcea1d5c0cb566a9954e8006a47d5

  • SHA512

    ab49fce7de0d31a34859025c339b79ee0f308ab564550653369e27ca21b35d64f987a2e3a85a6d2780a7a7d944be8d30f7c6522090fe5e54904f6df8a871c562

  • SSDEEP

    6144:4DthOzj8ZzKQCmwqBbvBhQ6oubr+SxlGxA:4JkAQmwqZvDJbrTI

Score
10/10

Malware Config

Signatures

  • Agenttesla family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1652-65-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows x86


    Headers

    Sections