General

  • Target

    2784-14-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    95b19eeea77a76ed2fe68846e93fadeb

  • SHA1

    59fc5b24a20f70a6e45bbb9b265cefab68ec2dbd

  • SHA256

    69756321a7db1505544fe987f1c6835844d4e3ac22365ca2ed17c8c66342def9

  • SHA512

    ee435d217d533c471ea4bc0c750b793652a883774daf8b404a9df81c2b7f2e6486f323cc8b64a2ece2e0f00eeef4a5ea29b30065669eb158a440ff72d474b2f6

  • SSDEEP

    6144:4iPPXnfvKXoLYx3bwxustT1RdpraC+9h8/lO:zPPXnfCYLYx3ytT1RPa/9

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1179011823245217852/BApmSysJ7ds4rFscxhzRAHKJv1hyP1UFKhyfN1ojsei9HMF0L9z-hwZZiDIGOsncVkXv

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2784-14-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections