Overview

overview

10

Static

static

10

2676-18-0x...ry.exe

windows7-x64

2676-18-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2676-18-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    13851b08f6fa414f96955c948cab4e06

  • SHA1

    226de75fb0ee01aa7c40351e13024aca807f16b0

  • SHA256

    c080520179850d5b998b49b9350761bd8bb8c7cc14eac970f2ed00ee3999ef20

  • SHA512

    a67d8765ace8afbb041bdfd03018e6b0088b8d9d7173473dbf25b05209e03954ad2cf99af03dc877c149db27469194aa03974f6ef048c27d969c24f6d715941e

  • SSDEEP

    3072:ldTvTHTukQoCyxMJNRpXtkXN4fVf5nLTWv5AVW:ldTvTHTukQweNRwd4fVt/Wvq

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6708872321:AAEJiAhtal2MAoOvlAdBGBC63RMbQjOymsM/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2676-18-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections