Overview

overview

10

Static

static

10

2732-12-0x...ry.exe

windows7-x64

2732-12-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2732-12-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    35f9255bbefc72a0cb61a2011a67a6fb

  • SHA1

    8a4e221816c06d775b4850d8dfbf2551dd40a9ad

  • SHA256

    53b9ad1a702be06189fdfd0b021e7d66b278aa703204a3c29a3b180816953930

  • SHA512

    8d23e2ab44fa1bc32f23e5016cb65fd64e9ccda2281c8ccc56379eafc29957f6049b271630c87a50a3ba845c4c1a057dd26f7eba9f74aa879e4a71f26e74b5ee

  • SSDEEP

    3072:Zw6r6AvHS4+l5bm8pVxewH9w8rfluOE8idmwJ5chy:Z3r6aHc5bm8pVNeeEPmwU

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1155632175954280508/UJAHnim5EEI9C_FOdMt75WQIx-LpUygiYRchNShhIadpLPi-9bmzOnR0zzqjFcqt2OV4

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2732-12-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections