Overview

overview

10

Static

static

10

2468-16-0x...ry.exe

windows7-x64

1

2468-16-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2468-16-0x0000000000400000-0x0000000000472000-memory.dmp

  • Size

    456KB

  • MD5

    3d911c5bf2dbc7f54c2e42ef46834323

  • SHA1

    425e85ebeef558ba4c87cbf039ac8c39c4af3d4a

  • SHA256

    e9bf43258c2b3b2ed6061b105c61ed8fdac35cf1c322d5c84f2edd827bc08d55

  • SHA512

    8b04ad5bb6584ad83a8e52642eff617de88f5de2f2c7c0798eef7d65c04efbb0243fd5c2bc4c5fc708ebe18b545443d166dce45f3fd1014d127315b21f23743f

  • SSDEEP

    3072:/tKMid3aKui+zORY7YPH/MiGNfkxB5g5P3rx:lKZd3aKui+zORY7YPULNfkxQP7

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.ercolina-usa.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    b3WDqk*8sb2!

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2468-16-0x0000000000400000-0x0000000000472000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections