Overview

overview

10

Static

static

10

2804-19-0x...ry.exe

windows7-x64

2804-19-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2804-19-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    4455eb382bedbbc7fac9e56e4b6a4368

  • SHA1

    cb1baaea7175fa8463e2a5bf7f697193382a79d8

  • SHA256

    97a2b641eb5acd7350ca01c19f835f983d7eb4ec92be38795dd865a1ae32afba

  • SHA512

    bfeac9b59bdbf3f415ba97bdbf1d70ac343f226c6dc25b0582954ce58edede33ee7dfc622bc4b6a75fd0b07a7862d9c4913655f9d9454e33594e2a41efaeeaf4

  • SSDEEP

    3072:PqieOOeuDcZaop2xFl9CyyomQ8o5hL+mtzMcOIS:PqieOOeuDcZxp2rGyfmQ8e+mt

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1183507859548409966/DLogPQ-F1DDyhyB8jQQaZyMMcOMnZXZGJcy3aRzF-4v3ffTI5rw5BJsXH-q9dmg6WDRG

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2804-19-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections