Overview

overview

10

Static

static

10

1512-33-0x...ry.exe

windows7-x64

1512-33-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1512-33-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    b645c69bead19ede90f82b490240ccd5

  • SHA1

    a53c35d10b67b4093f74ef958bc9a52b73694c7d

  • SHA256

    fe4f5d17c4d9a0e5eab3954248a34d71aede5f656e22faf127f0480a6c786b18

  • SHA512

    bea3ac60f835500185f9d8aaa081225eeec2eeb72a485447efdb17c12042032decdcb9b2792e816b917892da55f68d6d25f2b8c5e7807e4ddbbe46277f1495fe

  • SSDEEP

    3072:zGXpSeS1Lt6nrfk7pfhSYkjxrrosN+JF:AIeS1Lirfk7zSYkFrrosEv

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://thedress.pk
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    texas1234567890

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1512-33-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections