Overview

overview

10

Static

static

10

2500-41-0x...ry.exe

windows7-x64

2500-41-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2500-41-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    1f3ce91e1d02127513551078c473a5c0

  • SHA1

    6dbc56f8867ef07f9985ab3fe561a26523f069be

  • SHA256

    b7ecd51f4a0989c142188d00f0e9b8834b157889ea7f4ac6f1cebbbefd197fc1

  • SHA512

    1c9ae0233a8fff2afc95e1c21b58f444e955c377cd0621b2272a06a449a81f67a153497d7506732bedf1d757ef3c17bfb37eee9854f740bc0e1c06e7f0d765d7

  • SSDEEP

    3072:z2IU2677jT784ysGjfTgBPdv+2Umc5lKz4Lo9RKab:z2IUB77jT784yb0npUmGa4E9w2

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6407544939:AAGTKn-kT_5_-mfD76ep3NWg3fVeqZRoAIY/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2500-41-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections