Overview

overview

10

Static

static

10

3032-11-0x...ry.exe

windows7-x64

3032-11-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    3032-11-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    a5cf61836ae72f029050acc1fd3a995e

  • SHA1

    5ac79abc33e1ac2fe50148662913d55e525198d6

  • SHA256

    4487eda9af54e4b749595e1ccbd6db324499703a342c57926d0cd40fd95e083e

  • SHA512

    41cf8b4ce7ec64ea8ae130f237bac54e1c8d6c2d3774b3cf1d4718ce3159eb8421c4c4073a5db65f19c228b2904f40fa2ca204626df459715a520167196201f6

  • SSDEEP

    3072:aYULo2nnXvfX5CbzN3D1Lluo25f0fTwlhBh:aYULo2nnXvfX5ezN3RkonfTyz

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6774856537:AAHZ1W9fPQXjEaTP_7jWaEG-PUz-JJzlt1Y/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3032-11-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections