General

  • Target

    1108-65-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    ade164dd67cf248eacdd7711532cbfdd

  • SHA1

    2f6507aaef665286b518b82aa1ec643f089515de

  • SHA256

    ed46633458a88b8485afc11195ffa3b33f01572dc13b7dd287340a155e293c22

  • SHA512

    6cf8ea7f2bff603c2f5b00acf69fa30eeb22cdde4dc4c76d0c571b1598bf9af2e756e2dfe7bd06b3b6e0ed7a5796005c39f0ff80a039a60191dd9ef439a44588

  • SSDEEP

    6144:bDthOzj8FzKQCmwqBbvBhQ6oubr+SxlGxA:bJksQmwqZvDJbrTI

Score
10/10

Malware Config

Signatures

  • Agenttesla family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1108-65-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections