Overview

overview

10

Static

static

10

1924-1393-...ry.exe

windows7-x64

1924-1393-...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1924-1393-0x0000000000400000-0x0000000000432000-memory.dmp

  • Size

    200KB

  • MD5

    a8bb85bb2ae0e16da15bdf67afee4e92

  • SHA1

    aebf3ed95e72d392daed7b00cade27702de34ce3

  • SHA256

    388fdc07d9554ac196b683870182c63503847c7b6bb6f780445116dad4f92960

  • SHA512

    751fbf00da3ee3b2bef5194d67ec08f3695e6486bd98da517ef8b5fb6a661b18c5d66d53d26d2ad5df894ef4b71cba8e1bae542a4031001a82cfcc5cbf7aa808

  • SSDEEP

    3072:SvbFBhPJ6ufP545ut61NV+uE7iBglIN8gtc/XR4R+Prk0NXMfUGQjlXTjMr:GFBX45Eg3Si6lfV/hXPGcGIDj

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5822690056:AAFDKpbq__PeVBTEmBUDNR9PvqJRzsDsJ5U/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1924-1393-0x0000000000400000-0x0000000000432000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections