Overview

overview

10

Static

static

10

2544-13-0x...ry.exe

windows7-x64

2544-13-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2544-13-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    db7be5c9dfdc4b6e3638078599065cfd

  • SHA1

    d2fbaf820f3de801623d1c6bf875087ecbb17d2a

  • SHA256

    c08e66c530994a5ec95ee4215bdb908372dabb3ddce71b92783612bdf907a1d7

  • SHA512

    f2495104089757c1eefdba534caac8b4753347af8ef41494760e922a8032dae337156d5382c3114403aaebf74b485e5e831bc7f00c09ff35c6adcc1c03d010bd

  • SSDEEP

    3072:sZD77jzp2NiJgJryS0ReUEhATveY5+3erB9KqYu+f:sZD77jzp2NQOr2ReUEaTve5erBcf

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1165348161691320490/owiChq8K990TdqTmlmA_Y6ZHsEa8e8a55mSy2tkQsil_4MaYV8CLebSWMiPwv5n5mlnc

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2544-13-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections