Overview

overview

10

Static

static

10

2708-14-0x...ry.exe

windows7-x64

2708-14-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2708-14-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    b7ec5add28f673ce67935ae3721f7c0b

  • SHA1

    3898ae0c512b24f1960106dc83f2c94573e24086

  • SHA256

    f20b5c04fb006a946eb8ed528e2c0ed65bfd5206f36b51be2b9a4f64c42c642c

  • SHA512

    e1c3995af61e88440b654afd7c601ddb16a47350fb7a9e4fcc4288949766734ad40a6a379072076cbda77f2b4ed0e45a984bcaf0cb9b57ade4fba62b3754f10b

  • SSDEEP

    3072:NL2j+Z/jv5SiSyL1ZSvQzcyuheOxgiAOK4kOX:l2jm/rPSyL17OxgJP

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1155851254833098752/vo7YFAKtXfOsqzCNUtNicDb-UATDDMk-I1yIVvfrhWq2PcNTiC3zk-xEzVbiwJTsDRuZ

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2708-14-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections