Overview

overview

10

Static

static

10

4672-4-0x0...ry.exe

windows7-x64

4672-4-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4672-4-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    282702084a8fd7382488727414b96573

  • SHA1

    0af9c6693486819c7bdda23495408c9bde68025c

  • SHA256

    b28e81330476141650717de543a3db6d170011b6cb676e11ee5feed4085af053

  • SHA512

    2e8c5153a11e0cdec802f930070100596d9cf2c8e09914b29c758331c54279b63e764ad77242b835fa4705ed2d5c3611444e39e3f73fc3eb6b12e47d5ff44e49

  • SSDEEP

    3072:U9IC/UOYVFOXY2FODw7nOGz+gT+G5t7LhpQhp:U9IC/UVVFOXY2FSw6Gqe+oLh6

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot7017233680:AAEfWTUjfiK5hxLLRkmgitv57SQZuFap4nQ/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4672-4-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections