Overview

overview

10

Static

static

10

2520-21-0x...ry.exe

windows7-x64

10

2520-21-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2520-21-0x0000000000230000-0x0000000000272000-memory.dmp

  • Size

    264KB

  • MD5

    b9295a87ce51a0b35991dc52324f08a1

  • SHA1

    ff3f26e03b298adcb0cec5b940bb17407ce1ee78

  • SHA256

    517cbea4c03212034e5d90f68276c1aedf309bddaea15a62fa07db8c088e3d64

  • SHA512

    b1ed81346a2c029ea903210c713238c6c58d59c3cbfc39783090198cf24f3b0123715f7e9a096aaf7fbae58bf82a9e972cb01c98db02b3d73cf169b845e93ae8

  • SSDEEP

    3072:RHbZ2ETjeS1LNS+8nhRlTgK11mY3zeHU1uRn:r2GeS1L0+6lTgK1bje0y

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.aktivos.cl
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    +;Q-~mBbz^+I

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2520-21-0x0000000000230000-0x0000000000272000-memory.dmp
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections