General

  • Target

    2776-5-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    a04550a8aea965ae2cb7d54548d5b22e

  • SHA1

    bac33193a95ecbc67f61461b0e7ddf696101fad1

  • SHA256

    0b139b8f40189b04d8462b525d0b4ed53591b906b4173b82f3cc82f3b041f431

  • SHA512

    169e4b24addbe999f7df901aa34ad155eb75e96430f0fedab1192443774edb2f0fd28261374535dabc7b12ee7c9d48363f375778193ccf073264b83469dddfad

  • SSDEEP

    3072:/SgcYsA8lWkw6c1AQ0jayUWDelFq5rK8EVNjp:/SgcYsA8Akw6c1AnjpUI4V8Er

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6797507482:AAHJ8LYbNUMw7Y3bc6Qgeuc5Q3n-h2KBG50/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2776-5-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections