Overview

overview

10

Static

static

10

2248-15-0x...ry.exe

windows7-x64

2248-15-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2248-15-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    9f566eaef597168f3dc0a0d9f7265063

  • SHA1

    60f85910662f1aff43175be12f78a90903e7a904

  • SHA256

    f397371a3cfb4c206e94e7d78e195ddea82f238b4ebfe68982550579cc23e63a

  • SHA512

    b979e22b9a2f418886c4206bbe14d60ca126420e2a6d75c16f91343934f1e4853572e21b9e72de1e02595bea0e203790e7545a7f0895896315171e301e4ee6e2

  • SSDEEP

    3072:8TzO3OhMXXW+dc6+xEL8ooBWMG0FHDWHfE5TftXYM:8m+hMXGyc6+xEL8ooUMTafkBX

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.siscop.com.co
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    +5s48Ia2&-(t

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2248-15-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections