Overview

overview

10

Static

static

10

2572-13-0x...ry.exe

windows7-x64

2572-13-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2572-13-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    41642948d9c357ab7499a167b859b3ad

  • SHA1

    5f20493300b2a0bb98ba4d7511e6b00455cc907f

  • SHA256

    ee549d4e1ef923dea30f2e9a139405873711db1e99e146c7045b683b4e6cd11b

  • SHA512

    b588dba3f32a852890d8a2e7b25f8f56581196f3869b85e5d9d64c94a69ca143b6b1d7f27d8ccbe145b17250e9ff10819dcfaed18177824ab293c4e764a7a0a7

  • SSDEEP

    3072:dXpMBTErTH7Xj5hL9Kam1/8Rd2t+j5eYWGAM:xpMBTErTH7Xj5hLABCRdv1WGB

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://eu-west-1.sftpcloud.io
  • Port:
    21
  • Username:
    8e065e20d50941049d65f96f62357139
  • Password:
    26esZMYm4svydFPPVNZDGTMnq25MRawd

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2572-13-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections