Overview

overview

10

Static

static

10

2652-12-0x...ry.exe

windows7-x64

2652-12-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2652-12-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    b1c7faebf10de22de0365c68105e440f

  • SHA1

    380774bbff6935c2eedc52bd12ae5e5a5595bfaa

  • SHA256

    52c5c4e0597296b0fab31ece5048aec034d6bfe218a7117f51cc3eedf0b6b338

  • SHA512

    b53b196b31bf94087e3f1084a0ff113fecb54dc9a6c6aae3487a2b98c174b772f40b2abd27d959cdb1890b5e7bbe60fbb70940794979f72c4903fef4d50e21c4

  • SSDEEP

    3072:Ss+pZOq+NY7OBjKxl2UoJSYMC4UPUghIgQOaGhpH/N67:SsgKNY7q2xljoJSYMC4NMIgDTH0

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6672846419:AAFSAihbjn4BiXgm0YY8G7ozGP9JeR3fpi4/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2652-12-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections