Overview

overview

10

Static

static

10

3860-36-0x...ry.exe

windows7-x64

10

3860-36-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3860-36-0x00000000070D0000-0x0000000007112000-memory.dmp

  • Size

    264KB

  • MD5

    5e6b46984106ada8306adef563f0f5a5

  • SHA1

    96d64ee3d254c0a0e21e4e9299209a5ab5900087

  • SHA256

    4af8663a9f27462d7d8c5902655e733c0401523eaa8758037e363a5083643dc4

  • SHA512

    0d913be8d4dfa45480003aeafe92f9a9515817353fd5c79ce13685f0d5300b8ec3d5e70bdbe8c60658bbe1d49aa3407fe315596332e25b21f7ab814c0f4141eb

  • SSDEEP

    3072:qikK4y6RVx9QH6v2chQs/iMujX5i1Nunww8Y:qikM6R39Qav2chJ6jA1Ns

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://files.000webhost.com
  • Port:
    21
  • Username:
    tain77
  • Password:
    Computer@666

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3860-36-0x00000000070D0000-0x0000000007112000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections