Overview

overview

10

Static

static

10

2660-12-0x...ry.exe

windows7-x64

2660-12-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2660-12-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    dfe55f4923e0c240d41bae20321581d9

  • SHA1

    e64f24b09030586e02a353dbec0eece4f5a81028

  • SHA256

    d0bb6260389512bacbe64dd8bde037b9d3ffa0a6466ffc3370c6fdd4d7568afe

  • SHA512

    b53db8fc43d033feac2bc750779ae717f7fbaae8889c5caea20d70181677dd0217fbe1b832af7cac30f09ed2d18a1f6241202af3f2d43af56db92da6c4c1bc4f

  • SSDEEP

    3072:ROSKmUFiNK95X/6mpGsXYGT3Oxy05mWwrR:ROSHg95XSmpxO/5m9d

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6150575626:AAHpE9c3ETZP17P9GlpcOiMFC26P5vpRWxM/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2660-12-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections