Overview

overview

10

Static

static

10

2512-21-0x...ry.exe

windows7-x64

2512-21-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2512-21-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    0f35d5bde74175173c2f6e11227e5dd0

  • SHA1

    9858df681da3bf808c0ff3464917e1a79c927e32

  • SHA256

    114e356478a50f9dfabdb7f417c41cc76db66a780e6fa662c8c3233ca593a4b5

  • SHA512

    46ba080079c67e65dff7607989a8ea37743944072001ce0c639760bbe356332f5afdf85e0162e9544cea4be2cd6b0f91ed62f6f2730e9f9c4fc8df1c614960d8

  • SSDEEP

    3072:3zkVb3zn7z9Tf66O0c0K0ikzto9oBJYg1M5lqN8iWU:DkVb3zn7Vf66Oh0xO9oBSwR8R

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://eu-west-1.sftpcloud.io
  • Port:
    21
  • Username:
    6248aba3e30c4d5ca11aad04dd95e385
  • Password:
    DmEnBqH5w7NurkaD91VotzcZtKMTXKbe

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2512-21-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections