General

  • Target

    2536-11-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    1925ab4a41626a7b5ee228fea306b23f

  • SHA1

    2363ce7f2ec9f2a4f55089eb15e0b8ab03462d7b

  • SHA256

    158e28c8649b66617d013a26bc1e177605a4f33a3257b167078c5861db41cf52

  • SHA512

    8d8e87d4d755f2837d426e38074efbb035921577cc8356ffb73a12030d2abe045430043efe18049bebd665c8df62ac78b1c677d3a5cc10f8d5deec9844855ba1

  • SSDEEP

    3072:wTdzhmXb3DW3dn0tBfb5wqhkJUgYdkE1+570D3C9Cxa89:wTdzhmXb3DA0tB1wqhkegYdkE15Dyw

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6359985836:AAEpvgyD3CBEihuwlXNMLbKTgPfew2N22lc/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2536-11-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections