Overview

overview

10

Static

static

10

1136-11-0x...ry.exe

windows7-x64

1136-11-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1136-11-0x0000000000090000-0x00000000000D2000-memory.dmp

  • Size

    264KB

  • MD5

    0a4fe518ec3d9f854eaa07ba7920f27e

  • SHA1

    9ef1b41bde506e5ae208c5f4786dd2bad911bafd

  • SHA256

    e28ddd751b97087d3eeda3c82b654543bb6b929f30bc27d58bee1780e8245b01

  • SHA512

    eb63efadc66a312ca9de2f981612fb268edca9d24a5f9fc3195aa6d77ac7e0486d19253b3096be84fc3aed1d0c5f934fb4ab82c7573429b48ebb368addc176a8

  • SSDEEP

    3072:iJl23x1ZVB0a1tVHNgS/RhnFQYWMVtwhK5MARxhYQ:eex1ZVBh1DyS/TTdVtwhORP

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.siscop.com.co
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    +5s48Ia2&-(t

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1136-11-0x0000000000090000-0x00000000000D2000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections