Overview

overview

10

Static

static

10

2336-1464-...ry.exe

windows7-x64

2336-1464-...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2336-1464-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    3b40821855c7daee5af4e387600749f0

  • SHA1

    2f6b6613b40af8777bd0a3bddffa7c6c8d090418

  • SHA256

    85ddf697738ffbc808d523374778f0a63e4967e94f7bb2ae56ed359b899558e6

  • SHA512

    f8c642a61fce75296af24b55c3d96396202f6099c096131942b1c8ff34727084a5776e71c030963fb358a11e3090b5d0763b67c7d121ce36c61769469f061eda

  • SSDEEP

    3072:xLLPxoJ8MY7QkCYECpStD71RTqRxD2+hCCsHMlOcxb2MPrjCoty:xLLPxoJ8nXCYECpSt1ly2+hCHiC

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot2100759405:AAHQxGXNxGeuNgcAgCwnT3oqpIfFhYBuhgo/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2336-1464-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections