General

  • Target

    2460-23-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    3784304fcdc7f4deb42c30f3b6c1f8fa

  • SHA1

    51ca9a021e79ad0f5ee12c0758acce73dcd90aab

  • SHA256

    bd6222be63ecda3cddc6cb5b9e8b2297377db0c760a4af2fee3a95b01efc549d

  • SHA512

    29fd305b7bce3ff40866c8c869c0c3a119ab34e3315825c613e623d9afe5ccdc2ecf4f7ab27092352d63786f55c79903a42ae3a2d8ea379d9b0dd15e2b23c014

  • SSDEEP

    6144:fGl7wmCuSGC2/B9mCAqYh5j7o4GAKYPHiG:SCuSGC2J9mzHGAK

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot5239412158:AAHXn8rC3uvBHy_kv77GtIcxcuvBuXcKD_8/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2460-23-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections