General

  • Target

    2588-11-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    5118519b723a90b823fe87248993783d

  • SHA1

    d75e710ed271723b98ec169a03b79af8ffffe712

  • SHA256

    8cd63eea604c6879e555401c1676746389f79db7bf45e2d1722b9fa425046cee

  • SHA512

    def9cca975ac0bb036f3a016c75ec161a51ed833904ec82400d7548478edb0a9f38f36134042b8b592911a72e058340154e4adc6cd81bed1594724ee04e9a01a

  • SSDEEP

    3072:IkeueuujNMav5pgKwAxUo1sVw5Y1kcyxNO0OS:IkeueuujNMMpgKZyOsVQcyr

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1176618094270087188/ska8K-IVLXPC4XPgrIiupFjKjBIz3HGdgungFafUV_84d3Tfn341sZlAGngmmh9aBBpS

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2588-11-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections