Overview

overview

10

Static

static

10

3060-5-0x0...ry.exe

windows7-x64

3060-5-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    3060-5-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    d8e884dd2bde38d6388729cfc7dc19cb

  • SHA1

    2185932e97a61776f030632ca08af030d144064e

  • SHA256

    867b7be0bb532803c25073d55bf57e10c0e3b13f73133b690e6489abcc942872

  • SHA512

    43f9fb6821350025265d5a48716ac82921840b2c51684c0bba259732028af334f8adfad2b4d21326092f1ccd7fb426d6c883ab4bbaf1f69f824eb969d76f8fdb

  • SSDEEP

    6144:Ywq9e5w5DJxy+wvYSXgg60lo/W2WwCR2tEXQ8UZ:dZSGbU

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6599370963:AAHYVLyUgd9Le0k5YAQvMSjM72cBftugiL8/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3060-5-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections