General

  • Target

    2448-66-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    e7ee0b553a198f67d6f378e1b945a7ae

  • SHA1

    58f8405f2b0d3fafdd8f4abfd43492fe3e31a227

  • SHA256

    5230bf0fb5ecad1d2e75c6f2b91c73f25d35ef49ca22b99f10f9a6b94c089b58

  • SHA512

    4948f680d7c9a49f024991a1c158c5dde022f72b4e517c89606409b846bdb33941a415d4662284521e1b1f6a4a2060f0d51b9f83d901c9ea897146d79dc38c35

  • SSDEEP

    1536:l6fX+60i6DI1qRPULsrGonDUaWkS73jo1XePpeBTmGh0Z20YxvAzz0aIhdsDdA9I:0m60NDELiwTV3j+Iz0ro72gAuCrzpPa

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2448-66-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections