General

  • Target

    3048-10-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    7907ca98d4b743f5beac50b147970b9f

  • SHA1

    28a2e2f4e2d8b27bed3ff40cba094797e3c39cbd

  • SHA256

    55c6ed3b23d023b4e74087bbc4d1ddebaf4e62f5e06b89964577640345511dbc

  • SHA512

    f1e7203c8fbe40ae2e5185b65da77cc9aa74cb2d8b0032edb5db23a2bd7f2d38167f9c520626ce557f3ec813f3c91b28b99ea2f3dafe5c3ee84aabce576927b8

  • SSDEEP

    3072:+7ks4GC+5ggGD2Kftb1ifPJua/Wlluvv8B5i4EJE:+7ks4GC+GgGD2Kftb1kJxelUvv8nEm

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3048-10-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections