Overview

overview

10

Static

static

10

2896-11-0x...ry.exe

windows7-x64

2896-11-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2896-11-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    dd4c9c7ca2ecc3565508001f1e7b6cc2

  • SHA1

    6d739476e62f3990a25c1e6760d7425db8e3b8b2

  • SHA256

    c2893a7ed7babf1928b37de8e036f730c312af99abbf3b6cf7f3df11ac5319c5

  • SHA512

    25f2582a373ff1ad10c91a63a9b0aef624279b3ea8577e17a15ef28d4b859e6e16ef48bbb5a67f47fee3f9f976213aea8b5badc8a14e179806f197bffe9fa531

  • SSDEEP

    3072:ZcXvfXHb33f3pYAbcZUNfoneAuqPbS5jjtWJZHH9P:ZcXvfXHb33/p3bo3LjEtWf

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1163580376363565067/I7HBK5bQvc7cR0s88thy2h7D3CvgBAqeZYXLYNl68Cb_pBIrmfwju6z-F5jCIyf83K0B

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2896-11-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections