Overview

overview

10

Static

static

10

2804-5-0x0...ry.exe

windows7-x64

2804-5-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2804-5-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    1cd5b83d75ffec84e68b797ddc8c2846

  • SHA1

    7248945295eeebab3d9c751aceeb6359b68885d7

  • SHA256

    ea6d449f9b31133f036daf98a066ec7c5c11985c5489f7f88e7c9b1fae60cd0e

  • SHA512

    6aad92bfa1df457c1b42fcf4cc2383995283eb33ea4dfa4c4317ed1eff6d7861e906da0e7a6bf356b432b8f30015f517651a8c6e102c9fd4fa9ca3427a5b68f5

  • SSDEEP

    3072:LfvKMemZ+VZVxFzFzOu7M8SPOZ4IACcnMtw0ZA54cB8ZxgVM:LfvKMemZ+VZVxFzFz78RCcnswqm8ZS

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6312623109:AAGtX98kZFAPlUeO2CGNX3OW_wCX5mSaacA/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2804-5-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections