Overview

overview

10

Static

static

10

2972-5-0x0...ry.exe

windows7-x64

2972-5-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2972-5-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    6470bd473fa740d9f43da0c368073f93

  • SHA1

    e3491ea53953474e1801e1fc7cdb526392d753b3

  • SHA256

    ff27708da9b888476428f9a0d86936ea0936e127cbba881f8ee13252e3f72062

  • SHA512

    b84b4aef29353858ba56ccd1baa57e754f5c64179187182792c45f864459ce9900876bf79c7341a2eb91d46717b4860d204b5835da895ca0eef041b96a230c7b

  • SSDEEP

    3072:ZfIj2DQgYPupdHeWUeUlAu+Nnr5tvW653Bv:ZfIj2DQgYPupdHeWUeUi5njW6B

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6669461375:AAGwrSGDuGS4lzGe3ziI4ubZc9TzQ8r1m8o/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2972-5-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections