Overview

overview

10

Static

static

10

2580-14-0x...ry.exe

windows7-x64

2580-14-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2580-14-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    cdcf723e7ab46e4f602f5070a3b605d5

  • SHA1

    950d15a9eb429f32f8bd20670ef22ce2641b9a5b

  • SHA256

    cf72fff9760a91decf46211a8d7742b3925e6ea748a5a0c5234cb30f2a418b13

  • SHA512

    60fcd85acc44c45bbce32ae02323791d69db58134309e97d98262802694451f3ca138c2664f364ccd76e24ba3dbd7450839432fa2bcc456497aa24ba234eaac9

  • SSDEEP

    3072:XZXjHb3rpCqH3BuX38Inw2SVtL8V5eq+RuU:JXjHb3rpCqH3Ba38IEVtL83+M

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.aksumer.com
  • Port:
    21
  • Username:
    aksumerc
  • Password:
    211116.kS*-

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2580-14-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections