Overview

overview

10

Static

static

10

2036-57-0x...ry.exe

windows7-x64

2036-57-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2036-57-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    9c35e3c6cf676d91287523a26d700524

  • SHA1

    1328cb5682ebe39c822e0916933a552d1fad290e

  • SHA256

    5c13ccb3d1362222caf414bfb6cd32b0afcce9051d16adbd48d42cdd051eb4e9

  • SHA512

    f4a7f8a7e9fedb20e5f67f6adf9125adfea5d28a5f641bbb363f0f51824ce00b8eb0d07fe41cd8d9324073b66dd57ee896e76b3f070eb3fac23d3021834b9173

  • SSDEEP

    3072:eRBvFCwJDiE3tpO3u1e5G3ecWaOlm0IHDJQa+jh7Zf23LkEfqtKbVNXfCr3O:eRBvFuatpOMEPraOI0IF6jhVf23ZCty4

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5954474519:AAEGnfW1mRvGRxq-zIAvwJfpKEbhLLiqVaM/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2036-57-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections