Overview

overview

10

Static

static

10

2532-20-0x...ry.exe

windows7-x64

2532-20-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2532-20-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    30edfc6cc72258ddbb21d1098163562a

  • SHA1

    693c659b4f00abec2a53e0130d0c3559474e8a72

  • SHA256

    f3be56ca5fb08e4567ea8340eeea1aeff79e82920234bb5010305224be919025

  • SHA512

    a51c04e6cda641e832e89a60a00dccf14095a85c0a7f22629be1311fbddd722259d66eb3cb67757444f23e5813aa3b8a0e5c8d190d817c7fcee65b81cfb6e3fb

  • SSDEEP

    3072:u4KD4HpHSRfuY1gVyjaz/QWGDRHvTAoF0+kMjvA/5BObK+y:CWlSRfZgEac1Hv/0GLCOm

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6184846740:AAFy48QnJEpbqT9DY_xx392kz1tH5_khlWo/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2532-20-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections