Overview

overview

10

Static

static

10

2744-57-0x...ry.exe

windows7-x64

2744-57-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2744-57-0x000000006F2D0000-0x0000000070524000-memory.dmp

  • Size

    18.3MB

  • MD5

    d6937a2ceba113fe2272e0da0edc8236

  • SHA1

    948ef7f8963fb1390baaa40089b35130673beff6

  • SHA256

    f2a4fd8c86faaca2816c6890232d0ca1cc238c384a24c0ed2f35aa3bb67108de

  • SHA512

    e4dcaa4a80345c766f88465f524a250ee86083183a6541850e1f367296c20e47b7da61931098648d9ebb4050afb40fcf2fb3b4f336d1f5baf4030e6fb6157b39

  • SSDEEP

    3072:GHL3FwlK5I4TNgZlpoGPxGz2Slt7Ak5UZlCSZ:KL3ClK5XTNg+GML5UR

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.customcedarfencesmichigan.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    w5k~S]C4kn4.

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2744-57-0x000000006F2D0000-0x0000000070524000-memory.dmp
    .exe windows x86


    Headers

    Sections