Overview

overview

10

Static

static

10

2868-13-0x...ry.exe

windows7-x64

2868-13-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2868-13-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    cb4a63a792e9dedd157ace4c801eea87

  • SHA1

    f68f04ca019ad2820b7d85287a7a001b3738fb54

  • SHA256

    bdc0bf9e5223476959e15e4914a2c721ce835b1c635e07a306618bb162e7ac1d

  • SHA512

    73b5dd70a81f694a2e8fea2323614d0d1d239107d1eefa751c2e68fed20d856edf5ac6805e3b18f10af097c822f8b8f3911793d047650dfc13e4abba27cb34f1

  • SSDEEP

    6144:y89lxaSiI0PkZz8XOBL8MJlF0FmNDPqiZ:paZkZYm1

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6437062908:AAEjLF9P2SzySTsTGgeQXxxJNFNfbLGUHH4/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2868-13-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections