General

  • Target

    3048-16-0x0000000000360000-0x00000000003B6000-memory.dmp

  • Size

    344KB

  • MD5

    a2f6c78cd77235f866f8b3741ee6f664

  • SHA1

    e8b0a4ee29de9820bed3a5a531c9dee421c39b7f

  • SHA256

    1e79d2351064e7da7f12ab6958a69d114370febe19a78596f66eea9f79fb62fc

  • SHA512

    20a7b6c6e0cc7922a6e309ca9238504d12f4e11a4250cbe71e2857e10f91afb7af7dd5eae046a7b70683e09bb5c750520391bcefce07b9e6f725d9edac00700e

  • SSDEEP

    3072:I/YSeyGyYtW5FCdeECh/3e8AzzrVju2Dkoo7l4s2Ae/RRqYKwji72w:KYSeyGyYtWgA/ONXDDkN7laAOOwO

Score
10/10

Malware Config

Signatures

  • Agenttesla family
  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3048-16-0x0000000000360000-0x00000000003B6000-memory.dmp
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections