General

  • Target

    2712-28-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    ed529df06cae40c09a6f3feeb8006e76

  • SHA1

    b08d8d522fcc30df71c5d40ad54a0dae8da5178c

  • SHA256

    e0ef8da4fba7d958760ca49299791da510dd570613624c4844e9ab5bf6372388

  • SHA512

    500e58ee93535e580c265ca7fcb1e80376991be2a861e017fb0ae2b7b707d09773b3ff311225d03c1d909e23597cf11ad027bdba420f6b7c8ac8314f0eb4c351

  • SSDEEP

    3072:4c1Lb6TvTHTlv6Pv27CcTj1R6i/6ESI+65aWJfF1pxoOh:4c1LmTvTHTlv6n2xj1LbS/jwfFX

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://discordapp.com/api/webhooks/1209857093079924746/aRqkMI9ucnV7HnU-fejtpg1DyaC4R3yGnT_b8inR8VBAY9G-4x9zyP7I4nNnmj3b-zVu

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2712-28-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections