Overview

overview

10

Static

static

10

2492-13-0x...ry.exe

windows7-x64

1

2492-13-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2492-13-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    cce267a67f4c73450f2b0a790e26e74b

  • SHA1

    80db6eb6d29fb012083afabae6d8aded427fe1e7

  • SHA256

    f592656f102082f16dce6cffe528aa983cc5f94ce89d0e5b9b567fc2aab8d6e4

  • SHA512

    8dcbe33030de79addb7eca266004ba50d71ff4182521c63c481a0595b2b6725eef31482704a3c0bda9883779d8dbbca95f9700de97915cc01350bd71889f7887

  • SSDEEP

    3072:IzSA6i3tYgoQIS0OdEPLmUQ67tc7e4Koav5u/EO5PU6b:cSA6uYgoQIS0OWPLzD7tciTzeEOl

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6488735902:AAFjq98r8SzTcc0BHWZQiLUk749fQ78ULos/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2492-13-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections