Overview

overview

10

Static

static

10

712-129-0x...ry.exe

windows7-x64

712-129-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    712-129-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    c34ab1091778779d8de71d3a34904f58

  • SHA1

    dab2be91b553bcd87487bd0d43b63b0252e056c9

  • SHA256

    fcde10f14afe50a02b9303428d08bfb82f1456561bc230e2453b0d9e94308408

  • SHA512

    fe4bc54ce681a52df94638653c04a83daa599d00552cb10dec848c37ca8c23852f855af4ff9d598bf0d31394184a949ddd12ae91262b5d2e097157f26695e6f4

  • SSDEEP

    3072:I3kLt8h3he7/CQiK4v1eyL0KpdblNb0EOXh4e37ZlR9ZMGXJhIZIHRae:I3kLSwzgeyL0KpdblNbhkhbzfJg6

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6250389540:AAF1KME0gXOqQ6YWKB4YQVexdl5p80Fk0cc/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 712-129-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections