General

  • Target

    2948-79-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    188c6d9e7b47907cbccac6dfc957ed19

  • SHA1

    79f9e7aeaaa785a74b92658ca1ac25d98c9c2c4f

  • SHA256

    e534ae77987a438dd99361d5168b18d9d169da094261289455144f11909f961c

  • SHA512

    9ab07e88ee37457582df71536ab72774bcb74b36d5f0b41544646ef12d70f45836b6c1bd478e2b736276193cfb199e0723f15c4cebdaceb30389d9557f825de1

  • SSDEEP

    6144:1DthOzj81zKQWEudA3oXepEAk7Qybnnk3:1JkgwbA3Pjksybnnk

Score
10/10

Malware Config

Signatures

  • Agenttesla family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2948-79-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections