Overview

overview

10

Static

static

10

1880-8-0x0...ry.exe

windows7-x64

1880-8-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1880-8-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    1a969e062d852c5d0bd53faf8a035a00

  • SHA1

    40c4a826da340226a2e2a599c648bc85fe21f6de

  • SHA256

    052b34e3f51b5cd5c319457e2835f34f9a41df3953e6a65c4a338916d281de38

  • SHA512

    91d5dc42bfe58f79a4e4f2e0a8dbe9cd65bcd53f1b03fff753c9fac1e0a5173671c2efe574eb6f01a0173737ac302092152eebca8e7d9e7628a968fba8e47bb9

  • SSDEEP

    6144:DKbO24Y4z8V4rw/e+QgimA5CnZs0LdefU:mbO24Y4gV4rw/ej75cZs0L

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1171713839797112862/VQ8XgIQoP38Je3SGD15DqnwxqjDInyqz-uJvMRpGYtIhxtHfG0EXNn6jGuvRIKBD5eUX

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1880-8-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections