General

  • Target

    2608-14-0x0000000000400000-0x0000000000456000-memory.dmp

  • Size

    344KB

  • MD5

    7bec1c063d25714819d8f8d87fd9c87a

  • SHA1

    a9d3482b0d0c6d1b3d44983ca71b2d663a2d9d99

  • SHA256

    dc0e3700b1336206ee9a8cefbc5a8475c5556dc189ed3f9270153ecad4d995ed

  • SHA512

    6d680149e4b1fe5804ee9951867542f755cbef859c625ffbd76957c80b4b93f84451e98cc8c464706fcfdacc0cae5ba9539e88323c727e2f1d78ad542bda4e23

  • SSDEEP

    6144:47oDTt0/HgqzKfpUZou4nBEZbE/hK0MKb:4cD50XOnBEZbiKT

Score
10/10

Malware Config

Signatures

  • Agenttesla family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2608-14-0x0000000000400000-0x0000000000456000-memory.dmp
    .exe windows:6 windows x86


    Headers

    Sections