Overview

overview

10

Static

static

10

268-64-0x0...ry.exe

windows7-x64

268-64-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    268-64-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    a1624958f72b909244e1d177aa747ae1

  • SHA1

    19ea7123de000a5d132709d453f22c4a601e4f1d

  • SHA256

    45298344a3083ab6adbfeab646c934d0496cafe2424967a4d1546b68ac438075

  • SHA512

    b951849637e1f523c7d543e3c43c934e4c8e261426f6d6a02eba52a305aff4008851498a6099725c4d5e4122e6e362a2196324d3dce8f6b26cdf78f2b1397362

  • SSDEEP

    3072:7djpPC+O/HLtSneIOX527PpLMY8i3xhmCgt1f7vS5EcK:7djpPC+O/2eRX5gOn89gHf76

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6083045754:AAHbkpeZPAvRW4Fa_9KflBf2DYAR9w_K-Zw/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 268-64-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows x86


    Headers

    Sections