Overview

overview

10

Static

static

10

296-13-0x0...ry.exe

windows7-x64

296-13-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    296-13-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    a9662de950d0471ed7ea0e13d6a8aa5f

  • SHA1

    3ed2c7225932792986be48887fb20111bd142e6c

  • SHA256

    1d0fa4a7b2d11fb51d5854de5b6246ce25f862cd7fe8969828fc0c70c4f9a064

  • SHA512

    9adac96ff1bc2671a3d4ccb60422d324af629729920bd5fb5bd1cc41dec50ea3875da940ed3c9fbea6f8c9510868b08262f4793fff62180e4f20a05300a44179

  • SSDEEP

    3072:DDVrzvTnDsLrCRyDVzfV21C+hrUW0q50vLCxOYHAx:DDVrzvTnDsLrCiz921CiQW0ZLCI

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6868219551:AAErVq7MNJwva0m0_CLs0oSDQRugvTicj50/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 296-13-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections