Overview

overview

10

Static

static

10

2708-13-0x...ry.exe

windows7-x64

2708-13-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2708-13-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    758e84807cccf5dd46fc6d642febdb07

  • SHA1

    f0d7a7cd84bc68a2dd6e38f023b9e9b9b886a10c

  • SHA256

    82511fd7c5c5689632ad84ba497de10e0e23296a0ac07da62fecd2bfd4458097

  • SHA512

    f72eb37642e29e203ee15cef5931f99c796c37c9a05ff599c1e6e4e8d5c454bdd80822c02aeaee8ddb2604e296bb3c01ab8bb06d9ab3e156257de1e6a6e4c634

  • SSDEEP

    3072:zJIC8wu+eue4k7BDe/Oi5OtRjnhp5hXyvvVZP:zJIC8wu+eue4k7BDeCtZnh8vvH

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6900011672:AAGYn3MKegYd1zTjvCLgpKWqQCU6dnOO61A/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2708-13-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections