General

  • Target

    1592-1100-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    0599216f930374d1d69a77526d57aae6

  • SHA1

    a2d18db7abdba7408aefdaa0477905eb691cc858

  • SHA256

    8aef5be0825a2641c4220c9760b841274ae1f909d7c788ff8fbd41b4c2144ea8

  • SHA512

    2f1e5d8de682baf4cc551cb836afa0a90e7c483fcd83d0b227bc602f6acad6e17cdee78698ef9753e25be038d29dac8e27f7601b5f9a9c87014f6c08d56a93c7

  • SSDEEP

    1536:EAhFO5H9ARoc8n7Ooj+5xpqGACyeYbesJ2JYRh3ql0+Id1reW/OfOZpF12kV/EaC:LhkV9ZnPjmvqGLyJb7daId1rercry

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1592-1100-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows x86


    Headers

    Sections