Overview

overview

10

Static

static

10

2864-13-0x...ry.exe

windows7-x64

2864-13-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2864-13-0x0000000000090000-0x00000000000D2000-memory.dmp

  • Size

    264KB

  • MD5

    e689c5d749632401ed3db8eadc853d79

  • SHA1

    3edd9cc0120818e43303a029cf51133d8f318d5b

  • SHA256

    0c54da9756d9f225abb78408ea99b537ee8704604b76a0292a1e9e75a8a1b173

  • SHA512

    843d8183ca6d2bf173df15aa6d4b72c1b829918128d6cd3422110f2860ea9f715d1bd635a0f850056699e609ded906c729adf234872b06c6cab832bf26d2cf6a

  • SSDEEP

    3072:QJl23x1ZVB0a1tVHNgS/RhnFQYWMVtwhK5MARxhYP:Uex1ZVBh1DyS/TTdVtwhORP

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.siscop.com.co
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    +5s48Ia2&-(t

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2864-13-0x0000000000090000-0x00000000000D2000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections