Overview

overview

10

Static

static

10

2820-16-0x...ry.exe

windows7-x64

2820-16-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2820-16-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    4a8f16a7ad54665062e0f0748a2d0cba

  • SHA1

    4a60bbe1c572a0a914638a1c47a51e71c495abd6

  • SHA256

    5570dd045dbb065365d94e3e87922c9ef65447d576a8b34b10a970d9389c01e6

  • SHA512

    5ebdb4a8dcd480fdedcd86e9922d84702c2509cf249e1c71f4c5774185724464c9a00e7220a830da11c1247ff1ce13936eec5502606050949a83ac8aee7a80e5

  • SSDEEP

    3072:s7Ijj8Vlnvf2WBvenBPPORPvcxbqLv05qZlrfUd91E:s7Ijj8Vlnvf2WBvenhWRPUg7BfIb

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6011631445:AAFsmUWupBi67kf1bnY9HUwT-wSO-VJCazY/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2820-16-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections