Overview

overview

10

Static

static

10

2464-954-0...ry.exe

windows7-x64

2464-954-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2464-954-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    ce4a28e35bdf22866c8b8dfca72a2b56

  • SHA1

    c3331d4eef7a39892783f6c08416ab957f610a0d

  • SHA256

    fbf213efed7e063c48b5af1d7b2951b187d11600b276c09c9ced6d0d64fa1002

  • SHA512

    1d54be8ea96b6bd7e5c673375acc75af2ce34908f170e58963828f52579076f55f827f305be25fd09205865201b0a326697ac28dbb3b3789b8476f70e677a740

  • SSDEEP

    3072:VyQM77zD7pkW7YqHPyaZwnDVk5bhKx5Jkn9/:oQM77zD7pJDKaZ8DVmKxTA9

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6845602561:AAFgel3Pv3gycMADQGJs1oMrZnr2Mrn8BHw/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2464-954-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections