Overview

overview

10

Static

static

10

2708-20-0x...ry.exe

windows7-x64

2708-20-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2708-20-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    23d1e54e7ed8a39ca67bb5722c2c31df

  • SHA1

    911e78311581418ed872f0babc9be08240b06483

  • SHA256

    03afe079d5b160525cfec72d1ca5838c5956fe4f74760342e3ec00a8eefa5e75

  • SHA512

    215e32b425159e846ddf71129b15603feea3cf95e73255069a55ec64c8520b0a013bd684f22b32543c7539a4b31429b7ee07797c8c91f574c3d49480fda73e14

  • SSDEEP

    3072:f1heO+eOsmnAOMpldGc518UgYTKtIwE5WiN3NfBmwTw:f1heO+eOsmnAOMpldNsXbqwSN3p

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1176151058632937522/y3_ZQ9r_IRjvTwuuG-qOGBsgjULALJ5GOiLifCNfXyDDpjQXVdGAXe9Pwh2OfkhBFusI

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2708-20-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections