Overview

overview

10

Static

static

10

2372-21-0x...ry.exe

windows7-x64

2372-21-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2372-21-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    91d8226ca114dbb9d546db0d943c000b

  • SHA1

    1e9973ea3c8d585430478a8b51706b724c31c213

  • SHA256

    8dd58eba2a4ed8f08fa6c5e2ad3e2d468503a0509ab973d5a5170f4a9675bb6f

  • SHA512

    417a2e331c8b76ab4a3271a66d70e8047a65994865258bde903b3b29fe24193896ad2d4018bb9de037fde8aafcf00add97adf3af0173812053e8bceb2f1a1963

  • SSDEEP

    3072:31Td6iMw+amH4I8bE+mVWRa2GJkYaM1A51MPyIvFP4ap:31TdfMw+amH8rj8kByegyIvZ

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6963761648:AAEL0SFPQj0Q9fEkjK4Z24oZsmsROQs_c4M/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2372-21-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections