Overview

overview

10

Static

static

10

2732-11-0x...ry.exe

windows7-x64

2732-11-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2732-11-0x0000000000110000-0x0000000000152000-memory.dmp

  • Size

    264KB

  • MD5

    92a4844f72f25e319c413642eabf7dda

  • SHA1

    b8d2eedfe5a23d62468449034f7da2175112f4fb

  • SHA256

    55235353f137f711d78746bbd93168d69c0b14e7f37e77cb372413de5537f7d1

  • SHA512

    c32d3518b048f9cc3e2d6eeb88c8e2afb1efed9646fe86fc8bdfacb026f2e6693b76fe25b51fc4e2be3f4ebd38b81874e731d17c67be37b220985bab6db8fa72

  • SSDEEP

    3072:iJl23x1ZVB0a1tVHNgS/RhnFQYWMVtwhK5MARxhYQ:eex1ZVBh1DyS/TTdVtwhORP

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.siscop.com.co
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    +5s48Ia2&-(t

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2732-11-0x0000000000110000-0x0000000000152000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections