Overview

overview

10

Static

static

10

2148-11-0x...ry.exe

windows7-x64

2148-11-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2148-11-0x0000000000090000-0x00000000000D2000-memory.dmp

  • Size

    264KB

  • MD5

    193d38b33a893faf7fc983494cb35a67

  • SHA1

    09ea4efa937fea53296c21e8f2e1a2f5aa496e65

  • SHA256

    4f6a4915c7883f4fba7f5bbbcf42c28466d1bc916d98458d155b812d960c2f99

  • SHA512

    58d2004e243f547455919d45d6a000e2f69d6dcd7ec6aab81003765741ef9b5b220bc748dc708647465bf8f01082d733de76d4062cd4576dbdd23ba900c173d3

  • SSDEEP

    3072:iJl23x1ZVB0a1tVHNgS/RhnFQYWMVtwhK5MARxhYe:eex1ZVBh1DyS/TTdVtwhORP

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.siscop.com.co
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    +5s48Ia2&-(t

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2148-11-0x0000000000090000-0x00000000000D2000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections