Overview

overview

10

Static

static

10

2616-16-0x...ry.exe

windows7-x64

2616-16-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2616-16-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    30aef28e1c8122f7f88b11292226ddfc

  • SHA1

    9f3b99f92e0f212700a5d157c5d716b4d9b0db43

  • SHA256

    3f1e77d9e00b1cae1435e4a5d25b3478188f6ac74e25e4ab6b1d8c7fdb8d1a4e

  • SHA512

    d1524c9557d1cf358baf7b877377f4138678d6465c83311ebe8df989a016d80c416f6350b5b041f3f82d4f765b599a42b00f5d8f589d65163b68f7c51e1d184c

  • SSDEEP

    6144:O+VHUgshFTaxvR5C/E3psBhCS9s38nUD4dG0Wt7:O+VI7CgQ

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6364043354:AAF_1bGx2vGEmysmy8L-UNpPd2QFFHQH3WU/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2616-16-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections