Overview

overview

10

Static

static

10

1180-6-0x0...ry.exe

windows7-x64

10

1180-6-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1180-6-0x00000000006F0000-0x0000000000730000-memory.dmp

  • Size

    256KB

  • MD5

    1e5d41aad25007aaa1e1a56373bfea60

  • SHA1

    3174f865fdffa5c7ad2907085d1cf3ed60c30aaa

  • SHA256

    4eb0653953a3aeec52cef743a77c48d6ca9383740013dee352190d75108970e0

  • SHA512

    59928193b2317aeb3b52f52b4bc5c0d7aa58485aec0c4892971e86137218cb3edff54fb8ff9bcb63492d092b9d3cf03fec4b49d4b2caa6175b0c6b4b853cfd9d

  • SSDEEP

    3072:F7IjPzXjHbbLJjV3d0w/yAi5du75LmarW3Wo:dIjPzXjHb/JjV3d0w/yf5durym

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://mercuresurabaya.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    6&QMiz(2v%O%

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1180-6-0x00000000006F0000-0x0000000000730000-memory.dmp
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections