General

  • Target

    2324-11-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    c7ad8f14d67a2fd358cbf0cce1f5a490

  • SHA1

    ce84f0cd04011f3db56c97c6ad5454bdb50a42d5

  • SHA256

    808c9ebea7e6ffee78c8c26da41d94db3e9d91b42e244650002556cdd9add130

  • SHA512

    596a82adf7cdd2dbee240999134a868aa267fbae5f112a3af214a10e4aab77a56cc60df64615906e36867897eb622f404f9dafa557f0a692ec8a23328b21149b

  • SSDEEP

    3072:4p+RXvfXH+SA/MoCp3EF0RDvgLVN7J5n0YTBMsEOQ:4pgXvfXH2/MRp3vh+VN7YYTm

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1165884453684518964/WyF5wFDSDPj7xwaO693EsrMZiDJFajkrZhrWOtVVClbz45kfo6NVycWocBfks8fgBxE5

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2324-11-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections