Overview

overview

10

Static

static

10

604-62-0x0...ry.exe

windows7-x64

604-62-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    604-62-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    3dffdb41059d4b266ac3510abeb65600

  • SHA1

    e7f0867a575cd59ac400432e2c18913d47bbb77a

  • SHA256

    484f7252dc5f863560add1785d1fdadcd21660494a50ce46e6bb70ccad6c4b04

  • SHA512

    befd8b793a78fe7b6f1839355be907630f27d96d8f4c3da5f721c0c82393bb9646351bd25aec422e7c5f95472f6527460dad9882aba3ac911cabad4c2ed44d2c

  • SSDEEP

    3072:3Kl2UZsFjFKhQ6DHaaPGpktvQ37sRm7zh7LJON9QwxL:3Kl2UZsF9aHm3zh7LRw

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6030898751:AAGWK9mBSw-pypNHZ4QbexnTf4E27K5cZKU/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 604-62-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections