Overview

overview

10

Static

static

10

2748-19-0x...ry.exe

windows7-x64

2748-19-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2748-19-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    efd7d00ee25f1258511618d2da05cb5b

  • SHA1

    9046070764cd3f8b8a86940fecc5e52aee93e990

  • SHA256

    675844f1e0ed865eb310b1d02751cc074983c87a53a278b69d784f291fafff0d

  • SHA512

    f86b078bf4c177ca2b7e17c2dec1cc348890f699ed227afaa8bdc6311984b39e1068186ec0a3d50d48ac9b51e53797cf47f98a89ecd3cecd550808c3337a537e

  • SSDEEP

    3072:7JgFUgsw0CmcXhNDTwMPkUCtYeNb5shjCa5U:dgFUgsw0CmcXhNDUMsUSnyjt5

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.normagroup.com.tr
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    Kingdom12345@

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2748-19-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections