Overview

overview

10

Static

static

10

2660-15-0x...ry.exe

windows7-x64

2660-15-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2660-15-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    ffc7c448ee494942ea68ea98ca4857d9

  • SHA1

    c716eec2923e00c3a89814d114720ccc8938c020

  • SHA256

    98731f55253f85ab58bc31bf20c74aef3379a2b16b2595d35bcebcea291179d8

  • SHA512

    390a6f3ee390fa0673c2b1a464e5faebe9b07145ccc69217773c2a656a5770b8f953cce14f1f91ad9dea77dd43519a923c5f29cf8e85ebed4a675c600031fb52

  • SSDEEP

    3072:+kG5xfGKuqGauxx6phptV7yPyIAmqE5BojMohBST:+kG5xfGKuqGauxx+gyIAPjjMon

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6444185583:AAGERH8MMd1waxkmHCgwy8-Tr7bkj6jpwl8/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2660-15-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections