Overview

overview

10

Static

static

10

3032-15-0x...ry.exe

windows7-x64

3032-15-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    3032-15-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    46e26e2b12e3c37c921ef95be0c8c4fb

  • SHA1

    edb7dc318ac7d69417b39dba1a264b3a80bf6153

  • SHA256

    a06addd3f0659bf589c1d5ac8bca1a8c74e57a2aaef33e74ddc7af1e5f96d0d2

  • SHA512

    1d6325eeb1241e26745cde8bf760f9d3449ce16fdc4e1788e205ea90644ecf0fed17fd4e6a375db25efb040e12fc85bb98843c8062bf4817774c4647e5114a0c

  • SSDEEP

    3072:x7ID/bPDvhKMcaH4qGUA6giz+OBx2nlPVk75haiE3ode:+D/bPDvhKMc44qtpBx2lPVkeiC

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.fosna.net
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    =A+N^@~c]~#I

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3032-15-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections