Overview

overview

10

Static

static

10

1704-11-0x...ry.exe

windows7-x64

1704-11-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1704-11-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    9e458800fa5a500f00cc8a3e8dadab31

  • SHA1

    15594abf9d6e711d0886dfce67dea5e3d4fe508d

  • SHA256

    49429dd2dac5b93116966a2d310bb53c008d8d5f4df41e33a1d78cbd37e34c61

  • SHA512

    a7f597b072cc8099d628a3adf55f5756866427b18410cd270511310a9588865e8d9a941500ef27050e71fb00b5badea9aecffff7213fd71c651cfdb295fd67b9

  • SSDEEP

    3072:lkDULTrIAOeudzvjYiIEoq4dbKMq5nBAKBiNI:lkDULTrIAOeudzbYvqkKM4AK4

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6888405524:AAFs03Xpn0T6cMtLnkT-8XOF1Lm2jt7RNyI/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1704-11-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections