Overview

overview

10

Static

static

10

1560-68-0x...ry.exe

windows7-x64

1560-68-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1560-68-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    91dbc58fc85b8e6eb38baa5b61df2c5e

  • SHA1

    7bec8f82a39578f36163252a01e69d46a4dad87f

  • SHA256

    a588bb67cba7949004e51537dadccbe5a9812567deccebecd5a444f8011b9005

  • SHA512

    d14d889c7025b9f9f4d11d33c4264b422b3a5c7eea20f411892a00a9b509999d394a29df032c6b541284e3db36f73a4f0fc3e194ba34bb6c76714ade97ec5d4a

  • SSDEEP

    3072:JMVNhOHoVHZbJ0kL6WU7HxvV4r6DytSVebQ3EohJv:JMQIFdV+HLcrgqS6/gJ

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5482315235:AAGwacbjVLMaBQENAXUuPyVg-cvhlK0vn-w/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1560-68-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections