Overview

overview

10

Static

static

10

2972-12-0x...ry.exe

windows7-x64

1

2972-12-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2972-12-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    8e93f355f7a6689be043b4df36ab21f6

  • SHA1

    362d062871fca68f17b814421179c5747d98d818

  • SHA256

    41f0ac132867de81ece1ef9cc5dccc125568a27704013810cb36b02f3e2551a1

  • SHA512

    7132a062e4a69a0df85dd3b3b163b16a4382878f74036c45db919e41c64978fd0ed080c5e7fb42ef54f76f654645093fa5a99982f18824db448fcc7b51323917

  • SSDEEP

    3072:sSICmyXv/XnbvEuF0ZV74BT45Pa+XYlvVke:sSICmyXv/XnbvEbZITD+odV

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6444695787:AAEigvgi5Qdnd3hE36eEPMDQelz8m8RewZY/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2972-12-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections