General

  • Target

    2768-2-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    8695176e6821f8fa2fbad49c7b0a9d53

  • SHA1

    62c31b0b94e666f34c7b06128452c7f27861cb69

  • SHA256

    23b5a2fc4813b023690a10d39cfa8cddc650fe3a118d36db788bd741d9bad835

  • SHA512

    7fb14bf789dcd8e0b915bf08dc937d683a1f8a937ca09dc8c76f8166edd81e234bae4b3a2afe27ee30e7c3a4d7ef0fbaa3edd6bb660a88588e53f20e52587fae

  • SSDEEP

    3072:CDVrzvTnDsLrCRyDVzfV21C+hrUW0q50vLCxOYHA:CDVrzvTnDsLrCiz921CiQW0ZLCI

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6868219551:AAErVq7MNJwva0m0_CLs0oSDQRugvTicj50/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2768-2-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections