Overview

overview

10

Static

static

10

2532-22-0x...ry.exe

windows7-x64

2532-22-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2532-22-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    ca0290d4cc94bcb8899f07ad348f2a01

  • SHA1

    8c2149a8ca30a897ced5f3c23e2516d05cf8f394

  • SHA256

    8720fafcd660554636895241053d141b49f4dacf16e749ea859010a761c7849e

  • SHA512

    c793925b11b20beb733d785bf4c2ca0e5d7843357fdc25b9c514a9ee359674c185ba6ea72d4e605398ac99ec8ad1f11007987dae5d4486c39f86263e881a542f

  • SSDEEP

    3072:xRY/ZUAMw0V+3Jdl6PNpPa4kbYQ57+D93Fy:bY/ZUAMw0V+3rl6PNFa4kbYMO91

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://eu-west-1.sftpcloud.io
  • Port:
    21
  • Username:
    f27ea63fd3cd44ea9c8de4b2faa424fb
  • Password:
    4AOVP8idnlxzVmyt8FU3oxcJ2EfEW4R9

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2532-22-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections