Overview

overview

10

Static

static

10

808-1135-0...ry.exe

windows7-x64

808-1135-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    808-1135-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    ad642062fb9e95302e12493838cb957b

  • SHA1

    b8ce35648768c5065def4e8f2cf0ad41b3ee4324

  • SHA256

    cc703a57415e10a5aab6647bd453e8992186ef8412be3abc408ab6743c50573d

  • SHA512

    b19b325c971c99b998a2c571c3267c2a0e812b4ff0ec8a94cfae090393d9d59f80d7d0613d6be0103e5f786a9b0205740b74f23c2e0bcd0d1f080648b4990275

  • SSDEEP

    3072:ynsNXpgUAMhzcxY+oN7E9bcWjBG5ed+mVG3:EsNXpgUAMhzcx6NI9bnFX+mA

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.normagroup.com.tr
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    Kingdom12345@

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 808-1135-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections