General

  • Target

    704-7-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    3e000ba2fca0b4ba9da5b9db1b9bf913

  • SHA1

    7fea4e8420e156b18aacb795915d14f0f994a18c

  • SHA256

    d1bda587e8a3e34065f292afad66dbcc6217673381049676b8359e5325d541dc

  • SHA512

    e45bc1f91b60e50e87fae1b9769dda788ad4757791481d3e37d1ec54700e7c4e00aada9a419b8afcd4e956db13bd62b4f4c1bc37ae6a8ec5aca2fc8cc35c70a0

  • SSDEEP

    6144:Q1YT0SJFRVJfzkP7wlFOy5O7+vpSYBa3rjdB:3JFRVJfYP7c3vpSYQ

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6455833672:AAEFwznYRFbwog3UBqp13FPbH7YVb236SRI/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 704-7-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections