Overview

overview

10

Static

static

10

2700-12-0x...ry.exe

windows7-x64

2700-12-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2700-12-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    aa8ce01877343d8eefa59fc4ac433aa6

  • SHA1

    46f2db75c689a2cc7c4bbe7798619ae822cf4ad6

  • SHA256

    2ca381dd144caa3f817d2c035dad08a4b80eb8f2a36dc6a6126c9fa87b89b6e9

  • SHA512

    b272ed612ba4bdf1355eca3b758d787dc7a0586c884cad2323c7720c563163272e5dd48d5c4db1743aa1176f650cea12b95c5cb51a0124343eb0e62b73d5e06e

  • SSDEEP

    1536:Glht+wgCEN698Acdo2wG+fvxEnWzKLhTpd6JSTMomN5K/Mkz+TXgFsVES1cGuisy:36W/w/RcWicVTK/MkCjgFCES1jufq

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6421631696:AAElexQJqwOYrdOh3SHDdQuWmRc9DdRvIyE/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2700-12-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows x86


    Headers

    Sections