Overview

overview

10

Static

static

10

3496-23-0x...ry.exe

windows7-x64

3496-23-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3496-23-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    357bb3242560a7c3ac9405e6f2cd9a6b

  • SHA1

    70de53ded0428b7c89a8c831e8716ad93fd3046e

  • SHA256

    5e599ce6211df22485f3b99f740f12641da769d0924ce4ae7b549726298a9e29

  • SHA512

    60afc4b9bcd04c73dfa4940bad95b5f91356b347a18343b0e65bdaae3c25732656dd92436063197c45fda01c7857e704b3f1720a6ec0584df6791e4cb7b41d1f

  • SSDEEP

    3072:lXIjVHIAOeuZpc6eZNMFkZ+N5DgVn7BV4tU:lXIjVHIAOeuZpc6eZNFZ+cVnVa

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6965219356:AAHyrA1bIgaLJof2YxCIzYRgbH23pVjvG0U/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3496-23-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections