Overview

overview

10

Static

static

10

1496-93-0x...ry.exe

windows7-x64

1496-93-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1496-93-0x0000000000400000-0x0000000000615000-memory.dmp

  • Size

    2.1MB

  • MD5

    5bcc061986cc433107d4dfaf0b4bb729

  • SHA1

    d01898af00b91da6c61dbdb44249caefada78afa

  • SHA256

    8c88afdc628c3951a56fb7c851e20691600eba0c19b605b37ec7a3708e924a80

  • SHA512

    4e5797bec11b9298b164872b9d1e62ec9ce2c23cfbe6d1a9a25d139063fd28a9cfe7d6cf392661066de634ff95dbab9e52434aa0815836fd300b90ca67b22e69

  • SSDEEP

    6144:HFBhiYpmkE0ddjt5ZUT9k4RmsXYciA9t:tFpHE6djt5ZW+0DYPA

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot2122434962:AAFqluKwJfwmfN8BZ9xq0IjlIijJbDmwbKs/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1496-93-0x0000000000400000-0x0000000000615000-memory.dmp
    .exe windows x86


    Headers

    Sections