Overview

overview

10

Static

static

10

1136-59-0x...ry.exe

windows7-x64

1136-59-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1136-59-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    6a6000572a7ad0a10f070f88c5036dbc

  • SHA1

    647a8c5e519986df8a6155b0d4ce7dc15fed080f

  • SHA256

    8e615888b548b52d0f3dd14bda249e59def48e85a5d4bd8c2afb4265a14bb8bf

  • SHA512

    292fbac7c38274176b9c123b08e09443d1705e9f6fc2560fc6398ccdda97dac72fecc546a2ba4318a9a8688a9333df5cfff46076e5a6fe2cfd23571ff62ad1eb

  • SSDEEP

    3072:U22zu19rc1SeX08v/MAt45MVO/nPzFncTib+Ah:Uzeq3X08ZslPVcTiK

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5497972920:AAHqqS9EfkxnwYz3pQtCWef33URevfy5tRk/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1136-59-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections