General

  • Target

    2188-11-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    b660f73b94216cb9fac056748455d857

  • SHA1

    0b8d286507e3ed3f8f8846ce71e66342fd641dc3

  • SHA256

    a8bb30f6f89f6660544cb27a2183f991af8b5f5c11439aacafa4d1e4da345219

  • SHA512

    c354ece53cfb78888e3a4862ce3612a9858fd3abd758a974bad3d318a21307c8ff95298b5479e04cc9e443160f06e64468df603fbdfa9bb25deb096e4d86e854

  • SSDEEP

    1536:uXzfdD1yTjKxbiw6JX+l9iWswioyGaBxFrEJiAgK5ak5i4E5+QyDZq/XbVMKOyHN:ujfdsTjak+0+KB3r/AFU94E5P/rVFZV

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1150363626331451392/diQm3_-LAtuDqv52znxS979lWgZku3L6w_1YxVEt-0J336JdLcEM-R02NLCvYjDtnmBt

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2188-11-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections