Overview

overview

10

Static

static

10

3876-140-0...ry.exe

windows7-x64

3876-140-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    3876-140-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    d21206c6e4209063b76f7794f620fcb3

  • SHA1

    bc9759fe696f0b550a860fd8c5aee399fae19813

  • SHA256

    190f932a4e65da47c2109e279a863835589e7cce01c581d8e2d51fb92a0fb9fb

  • SHA512

    c5702b48ccaaaa770bf6165f12226ff653112104ca54494b4d324062d5afc69bf059daf2065ae98a82970e33dc67ad9841a26576fea11eb62e2f60904393abfa

  • SSDEEP

    3072:3ARBj9fA0V+zfZ6zmYn13pzxa1p5Pit3IAkotGXbne6cgFyakKqHzn42oJ8GxF4Z:3ARBlVKR6zmYn13pdAHPit3IAkotGXr0

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6146448630:AAFDNJNL6_ijRm3JFXG4wLYsktTk9DjETWM/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3876-140-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections