General

  • Target

    2472-68-0x0000000000400000-0x0000000000446000-memory.dmp

  • Size

    280KB

  • MD5

    826b9f279c3b5b66253cade76c98d021

  • SHA1

    70fe8ce7cd8fc36078d7876f9be51a414074e276

  • SHA256

    04e997b08032e14bf4e3c0c30c47fba34a7692dae740330b52d583224f59bdd5

  • SHA512

    6c026c66474492f168cb722be043774fef5c9247d4ff886551c24ba1ffb2030c1dc1cce682db7c95d28078e43ebc40a07c4b1f653d81f9336d8355c9e8b0dcf9

  • SSDEEP

    3072:PBGybM97hOQ/iK2jrOyip8/XbKjv0DT34xRgDpApCJQwOtk5eTzCN10yNB0B333l:MDthOzj88zKQDTIQpHnOvRD4HvREz

Score
10/10

Malware Config

Signatures

  • Agenttesla family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2472-68-0x0000000000400000-0x0000000000446000-memory.dmp
    .exe windows x86


    Headers

    Sections