Overview

overview

10

Static

static

10

1500-24-0x...ry.exe

windows7-x64

1500-24-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1500-24-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    06bd41ac92ab23a48bd43cc73f08fd94

  • SHA1

    cb412836b647f08c36724fb00094345eb5d7330f

  • SHA256

    675398c2644d0124affd56956310aa5c4406752a0f429183d358877da7b97b36

  • SHA512

    b2f5cec0894338ba845f67dcee5086c1528bc0fa58fcb94503a1eed3ac7c060e99fda8a6da74302330a09061c213162a4478ba7f17a409ff15909ba064e02f03

  • SSDEEP

    3072:iwH/qrxC3rrDTLOuRGa+mOK/Zly1P5s+N9Rnr0:iwH/qrxwrrDTLOuRt+3kZly1JN9R

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6369080394:AAFEItWVNdHHyWWLHTZ_gGRSeWMYewCCU2w/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1500-24-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections