Overview

overview

10

Static

static

10

2576-10-0x...ry.exe

windows7-x64

2576-10-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2576-10-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    9b4dc59b80566d676f4e57024f533862

  • SHA1

    8da74c2ee00b12b03c4ff85e345f210e08b46808

  • SHA256

    e682d4fbb62d0a7ec9c8dfc9876919db9ba036977e45580e692283f78e155d15

  • SHA512

    bdf8f5dddb5f8568c05bfe93602c21d35dc837ffab9ae6baf3c852fefc1000c63d79c2f8cd422ae45fd272760aed180c513059258dc77105b14afda304339f4b

  • SSDEEP

    3072:WTtVw0VSRrtNTw/6b2T79ehhTVY6/h2awfVa:ut4r86b2T79OhRF/h2Nt

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1143866479729717390/K-qxdRKbl3ZD79HQ8iGm1n-TIpzsqHeWaBEvBoTTR2X3ga-upcGwypU-L7xgKO42DhAf

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2576-10-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections