Overview

overview

10

Static

static

10

5108-3-0x0...ry.exe

windows7-x64

5108-3-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5108-3-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    f98ba4d633ba3d3738f96bbc7e9b19c5

  • SHA1

    12f71235fa46b072c5516e18dc782a3cb26e08c2

  • SHA256

    9f97d136e4ed0be54981c06814519b25c53755984206ed03a6c608db66499e77

  • SHA512

    58acc5da9fecde331b191daeeb98f53b8ae5c4eac769c99408b84928660385bfc3308f55f6cbf6645fee75257e4bf15ee2e478ea61ccedb1b8b8bf4e2a988dd1

  • SSDEEP

    3072:u4KD4HpHSRfuY1gVyjaz/QWGDRHvTAoF0+kMjvA/5BObK+y:CWlSRfZgEac1Hv/0GLCOm

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6184846740:AAFy48QnJEpbqT9DY_xx392kz1tH5_khlWo/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5108-3-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections