General

  • Target

    1984-15-0x0000000000360000-0x00000000003B4000-memory.dmp

  • Size

    336KB

  • MD5

    b6dec93712c1a933c6a82b7dbf465047

  • SHA1

    57be84c292f8e1f6e418499d1c4e3ce68a376947

  • SHA256

    443013a40b36c74415f330d9d56f9d7a98ee4114f26f515a4c1769854d88322e

  • SHA512

    96d3ad06f2a85af4edc570f159ce2294e9d407a2a61edab4700403f60522ba996bf80cc3f6775989884f87bbed69080dbbb7352c68ebfc3322b3b7a66e50cd4e

  • SSDEEP

    3072:ftlSySq6C2SbA4n2UejzOj1MGJGFwyyIZzKfyJpR4lp2UsVcNTr82+s+TmzvbImO:qySq6C2SbAggmj11JZIVXR4lf5s1cv

Score
10/10

Malware Config

Signatures

  • Agenttesla family
  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1984-15-0x0000000000360000-0x00000000003B4000-memory.dmp
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections