Overview

overview

10

Static

static

10

2680-22-0x...ry.exe

windows7-x64

2680-22-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2680-22-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    6ff0107769e494bd4e76f1b34da34811

  • SHA1

    ef06af98f84dc5b9ad0351f3b854cdd6599b4f48

  • SHA256

    9715236c50f9a1ed67a6592c7cf3bd9ea6daf6b9fe2fe4c959719c42408e09a9

  • SHA512

    8306d7b1bcdcf2ec191d680f36a325f2a02fa9155cbc25fc5ab33ac348fbaeb45b44859a7024efbe0d898fdc3ecd42413c6fabc8dba10185c5d8c5c9c5ce13fe

  • SSDEEP

    1536:+/JoyaPgLBGCF8IzT2ZskekLkGgvIIeJS65YKKNG/DiXIBk1gGVgC9P9+dahjbP2:wJo5PZu2gPmIqjOG/D/yiK+dah/hVF

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5573921253:AAHXKq7lrmioCzUGP-9p7lopfbVX0A_ZdQA/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2680-22-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections