General

  • Target

    2500-11-0x0000000000090000-0x00000000000D2000-memory.dmp

  • Size

    264KB

  • MD5

    59cb264ed314770ad6c2949b6a000f12

  • SHA1

    b2258be4acce4a7b2507f656fa65d12041cafaa1

  • SHA256

    ac2e5506d5a5e7d0f20299526e9c67bf466b2c5af3df00a8e48079866924157b

  • SHA512

    303144ab5cc9f2850cc611840136d64404ebfffb70e1c82a31105a90bad8dd74604f1fe9c90edded86c7d16cfda6e9fed2eb17f012e75d7f044d7d7f69d86855

  • SSDEEP

    3072:9fONaF1OpBl3DXgklTUFYGqnYB57kRwYYU15Q/lP7RCa6GE:4NaF10Bl3DXgkNZk7kRzYUcP70

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6776344622:AAE2QGMduuZ12VrNAxC91B7E3v-RBpjCMNI/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2500-11-0x0000000000090000-0x00000000000D2000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections