Overview

overview

10

Static

static

10

1060-120-0...ry.exe

windows7-x64

1060-120-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1060-120-0x0000000000210000-0x00000000008D1000-memory.dmp

  • Size

    6.8MB

  • MD5

    27bb6f26774c97298719f3162bc06266

  • SHA1

    92fcc3413fea92623b284fbc74658a3ec5b20690

  • SHA256

    8666e59303608c41485448516b6c7c1245bb0297fc5d2af6a151df2bd2b1b917

  • SHA512

    25801e7ff0495ae006ed91b08d28c71c0601baa8440e9638f7410f412be99f3136c9eeaa787e71ad926e3345a5fa0d1b578c5f987f100b41b53eeebf25351c45

  • SSDEEP

    3072:dsIRB8CSmoEJrpsU1Qj1EoIZBCfvwtnnw4zEuFe6mTwC1cZnzJg+94PujB:dFRB8lqreGo+oIjCfYhwfwBnzKd2j

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5890284317:AAFxZGYyxiXSoARuFHvgemypoSAzxMytEOI/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1060-120-0x0000000000210000-0x00000000008D1000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections