Overview

overview

10

Static

static

10

2676-12-0x...ry.exe

windows7-x64

2676-12-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2676-12-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    99283b0a5341a60998cddb95194439fb

  • SHA1

    392ad09bef343883b8607b1601f00ec9ed45b6ba

  • SHA256

    4399ed5afeb5143d1358d4020adc3bb77b3dc455975b2294e524f2f171f41559

  • SHA512

    2109df85b74814e7cd9993027678216b5377e08983f04cb20ba9dbec42bac69d07587ab4fdebf3567cf9cdbfb38ad9706202c8ddafaae2f7b74e4cf0cbdcbd01

  • SSDEEP

    3072:j8XsO+eOesb7DHp2VUJ9n1Neq4PFt5sXmf5mGsuo:jMsO+eOesb7DHp2VUxe9twmfk

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1168442671841419354/_UOsGdCyvRo3vonESMsWPoJPcDgYGzrlrY_XGQC4E6P10TZ4wI9_db3vOHEcgu9uGefS

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2676-12-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections