General

  • Target

    3000-11-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    184015d0a226696f1d75e8fa35a5722c

  • SHA1

    6edff4d2e8c0a66b11bf6dbd80acb1232b4ac6ce

  • SHA256

    635819bd50928514cd52bd8b410449b262f2b4d20a916555c44405784d00c889

  • SHA512

    3887ffb8d4decbbfc84c03ab7bff508c64255d866c5e3144b967b670a47e3fe0843439599a81c7a81e3646f92b492e2e4c50ba749200abbedbdd2c1dbe6831fd

  • SSDEEP

    3072:OqRr2eOOeuFp0AqpEiewxHXeH2lHGj8N5PibklteP9:OqN2eOOeuFp0tpveaHXeHcGj8ybk7

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1181894413438439434/9bOHVO843L8CrAC0uc2nEWNawAnthabqbd_3QLkg4EwlDdJ0KycDbG1rrLXUyDx--pB7

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3000-11-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections