Overview

overview

10

Static

static

10

2476-22-0x...ry.exe

windows7-x64

2476-22-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2476-22-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    b650524861e2f22865b873b22d020365

  • SHA1

    ac41e31fcd01ba4abb1cb56dcf1732a7e01c6d1e

  • SHA256

    e47677988f62210b41dc5122c606123875e97f244134fad092b85704a6df6265

  • SHA512

    da96e07ebe0d49eafc88c1f27f9ae1cc21cd292e110fc1f8ae200693489ffa05caf43748e00dc38021fa57cfe998ac670d3a933a2294b1ad12985eaee4c75511

  • SSDEEP

    3072:6XICqDic4IAOeoO0KalgDtrYfFlFHynM53Rk6hvzVAp:6XICsf4IAOe6lgDtQdSneu6p+

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot7026407452:AAH1dmazVSEAh4Yp0yIkKCHFlwNFTQy4st0/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2476-22-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections