Overview

overview

10

Static

static

10

4352-6-0x0...ry.exe

windows7-x64

4352-6-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    4352-6-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    523e51c656bc57ad64cf090c77fc4e05

  • SHA1

    dad31d96cf5021917ef1fb9bd10cda96c2d56424

  • SHA256

    317c201e2be7cdc9f273667cd901cb6e6155c2ce2e243803f255cb44a863708d

  • SHA512

    6b2c134f5660b1a359e32399f35aa72df79a12791b32221224b97eebb0e341915801074f50bebf2abd4b8f11350edf168746b4e084234803ae02925dc31a6f72

  • SSDEEP

    3072:rTwXRCwCuIjY9xtiBdp62LVgO2nlR2gsfToO:r9uIjYsBdp62LVgllR2R7

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6401161923:AAHcyy9gjRwDOn6Ryh5JlflWZY6ut8B72jo/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4352-6-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections