Overview

overview

10

Static

static

10

2656-6-0x0...ry.exe

windows7-x64

2656-6-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2656-6-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    8c7c9473472ffc14742227f73c208a5e

  • SHA1

    d60cb5d9897867af3abc87d44029b5ad920dcc7c

  • SHA256

    6621773396a208ef242acb3695b10fcf7b5c5b5ebf94ce8c8edaf2683d9337bd

  • SHA512

    2aecb497d6de007a31cb99f81058dc315d94f9f9b89c966f23caee376dd75b9051d11c563dfe249c63a0de82dcb248f42363ce25c4e04ce566470fb91158ff49

  • SSDEEP

    3072:qr3DXbTaieymvqfN0Pu3c1DqTQ6nQ5+meYAxXLUOE/:qr3DXbuLlGcwQ6nHtYAd

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://discord.com/api/webhooks/1202330946817237022/1d5Ynow6yHbMqcRfr75qQjJVcSQnFlKpV4g5H2hHiKoRW33XeyZHnl-7hxdTf95oiy9f

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2656-6-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections