General

  • Target

    4120-1090-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    ee21a3dfdce5a3086d3dc99a1a15539c

  • SHA1

    2fbabbd4fd8f6e57231395dc2888bf6f99b3f95d

  • SHA256

    a7f5bbc2b1ef59b74a91735f6b4127fb7a25eee311653a366636d081a8034fab

  • SHA512

    43b6b87bc9c18be6136a9110c6baef419695c9697668a1f43a3fe2b3500e195ce81855b5103cc5a33f5bdfe84a1f32b01c3684e48f88fd5771fe7fab35c6910d

  • SSDEEP

    1536:S87aPcF38d8W+lwM1Bu0RF0ZzImtosgwrtoFSnRTZm6mf78AbyWGlPq+2q+MBLA7:SIqY3QslEn3ElbEr20bGX6nsfXT

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4120-1090-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows x86


    Headers

    Sections