Overview

overview

10

Static

static

10

3792-22-0x...ry.exe

windows7-x64

3792-22-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    3792-22-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    95d5604849672da2a625a911e69f73be

  • SHA1

    7779bc7e84f480df0753d09b4600711e1a2afdd9

  • SHA256

    d9fd0843013ceb58692179876db5f54fd0925f953db53a94b78889409d04d9b9

  • SHA512

    bbb9b83d6eb01a6397dafe214f2e7b1a43b1f96126067536e298e03f7c22e464b51b8a86646c5031b859b21e9fe8e46606646cd7f0239c9b28fbed135a15ae3c

  • SSDEEP

    6144:3RHJ6r2YCsUvSfPiHwCunkrNOOQtBHPtna2PhE:Bpgksp

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6404401174:AAFyIRWqnBAy_mX3EL7dwBBXOlittnbrhy0/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3792-22-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows x86


    Headers

    Sections