Overview

overview

10

Static

static

10

1960-70-0x...ry.exe

windows7-x64

1960-70-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1960-70-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    47be18b413c6b330a3b94ca8e0c4c4a0

  • SHA1

    eb1a925e1b8dbe99c3b9a51ceeb6adbfcfd12832

  • SHA256

    d2c59aba45b1022d3b55270868c77d1acfaefdc9654f0dc2a69d2a132c48b666

  • SHA512

    9f95c7be7514e0f9c013edfc343571d5d7c2a6e6a561bdb5311f278e7b81a976599343e73f9964216a9418929f961fec05b20ace4b393016bed3ea00e1a29f7a

  • SSDEEP

    3072:UmiON3W8jYN0/lPY5gxEcMUnzeV4Bp1dUYAN6pi:mhcZPYjctbpHzAAp

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5901460996:AAHf6PQOiB7G-2gLPDnJ7ICMAJBVgaZdf78/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1960-70-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections