Overview

overview

10

Static

static

10

2492-12-0x...ry.exe

windows7-x64

2492-12-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2492-12-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    39fe55859810d21f1254daf196295918

  • SHA1

    85cc92b4a0d1859f9be696ffb4a5d3896c0a3079

  • SHA256

    a8c2408a082bf907373116d7ae003e9ae63d021fd276bf0678adb63b04763f3d

  • SHA512

    1d41b92f27aab483ed0b0c03b706d3a24e140b3be00c9316a9af00f828f47b33bc137d831fa761fcf12212a4bc599c1686fb63130f0af7b60a709557a462d891

  • SSDEEP

    3072:evi8wEgsvHLVLWIrnAU/HW6T2Kt6DL5A9g9icVY:Ui8wEgsvHLVLW4nAU/pt6Dgg9

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.stingatoareincendii.ro
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    Q-1HmWsBJgRe

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2492-12-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections