General

  • Target

    1168-67-0x0000000000400000-0x0000000000445000-memory.dmp

  • Size

    276KB

  • MD5

    711db090285aee4bca3aaf14446cb719

  • SHA1

    f7235f8caaff9b0510e6880952ea94b764747ab5

  • SHA256

    79ef9febc7db598a7897aa0be8cf66c0c6f77a82a6e059920438e18425ff6b6d

  • SHA512

    122af8c28cb588bc5e20ab3c45d7383cb965206b309b1b2739be9025fb705d6e4dfb66dd7884e6410d9f80327d923cdc41aea05813a77a524e973dd380316ed9

  • SSDEEP

    3072:xBGybM97hOQ/iK2jrOyipO/XbKjv05Ci/zr4ZTTO4s4aqbDAxR8d8X74uRhPSKCy:KDthOzj8OzKQ5Cif4GmDRs4BqwWELG

Score
10/10

Malware Config

Signatures

  • AgentTeslaV4 1 IoCs
  • Agenttesla family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1168-67-0x0000000000400000-0x0000000000445000-memory.dmp
    .exe windows x86


    Headers

    Sections