General

  • Target

    2728-11-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    a1765c16947896b5f486a453271b51f6

  • SHA1

    c1233e88259693cbc43ceaf98ecbb8eb105e30e1

  • SHA256

    c492ce330a2ae5e8321b777d14a8aa6b97cd37d834e6fa20f5e5a33884a7725e

  • SHA512

    ca761769649ead6203e7bc5279c5d2931cbf52ff2073e9af5faa18ed11f88b7dbb250e1d38c60bf4e9753e88b16d6c9af842800e6921ec0a03d435f495609d51

  • SSDEEP

    3072:d5ULvRu+eueAhXvCHkwKQWcxSp5peXR1vj:d5ULvRu+eueAhXvCHk8QEXRp

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5245141025:AAGoJr8mwUxCz0600J7yOoPKkUt-JB73Qqo/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2728-11-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections