General

  • Target

    2156-16-0x0000000000400000-0x0000000000456000-memory.dmp

  • Size

    344KB

  • MD5

    844ace28a26a935d093b8ae70bd3008c

  • SHA1

    a2254707b2ec785b7b4f4096668d78e3993efd9c

  • SHA256

    256a138f4709a5341602a5a21569a3f5e0fd14ff703d02aea765c6572cfbb578

  • SHA512

    fd50b5c4654465714c0061e02e08b38c4cc72cd667aaa93b4341fd623ae291b474d781cb2b282a308e67a18a033d37d0d25aa1cd29241c0cb1dfd432a6c3a06f

  • SSDEEP

    6144:47oDTt0/HgpzKfpUZou4nBEZbE/hK0MKb:4cD504OnBEZbiKT

Score
10/10

Malware Config

Signatures

  • Agenttesla family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2156-16-0x0000000000400000-0x0000000000456000-memory.dmp
    .exe windows:6 windows x86


    Headers

    Sections