Overview

overview

10

Static

static

10

4344-26-0x...ry.exe

windows7-x64

4344-26-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    4344-26-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    b18dbc2c8c93bdca4bb91823cbbad61d

  • SHA1

    6bc2a4b0ed67630a871ae80d8e9662eeb59a6461

  • SHA256

    8183548d388b3ef32c98e3db68c3a58a2255ee74b8d17ae31f242664f0b28d05

  • SHA512

    b1265b9e5762df78ab8721776c226e6a38e8cc6933f1af32288bbbc0ab4498274835ecb5f7f7fa126ed16d99e8a2fd3c639614724600b893ae8fbba90ac21ac6

  • SSDEEP

    3072:/TzO3OhMXXW+dc6+xEL8ooBWMG0FHDWHfE5TftXYM:/m+hMXGyc6+xEL8ooUMTafkBX

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.siscop.com.co
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    +5s48Ia2&-(t

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4344-26-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections