General

  • Target

    2208-21-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    d9dfae824f810971e066dcaaf7236c33

  • SHA1

    816b695f4dfc9278bd5b9cc31af5164481da91f9

  • SHA256

    7f3f2ee87c0687fc2cd194374f59c6505f985f7e1c40c6e518121100f3c2bb74

  • SHA512

    1685d4c9e1abf321905f446dc38ccb57ec81609f85df8c22b0de85bc3e1fd0d80ccbac09734bb0ccdeb773b67e691c4ad394b30a472ad0d5b243105ccc7efa9c

  • SSDEEP

    3072:Jc7eOOeu3zYOaplVK5pZSDfprFNYkclPR5JtFtpGJiwQR:Jc7eOOeu3zYnpDA4fJ7YZlPfFtg

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1179754620189409280/cvGxRVK_PSI2O0lg_7WaqKbN5d7xo4hk02LOF1QlJexNT6csSiv2fJwBfFcsGuZBRqCm

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2208-21-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections