Overview

overview

10

Static

static

10

2616-20-0x...ry.exe

windows7-x64

2616-20-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2616-20-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    95b9509741daec46b01cd2e23956c3f2

  • SHA1

    7efd0ddee0b970efa087db961544a0ed042a5d36

  • SHA256

    1f1eec1e06e9ddd872be58c8733d5d1ec09858b3d2002a906ea4b2ebe1b7bfef

  • SHA512

    ff9354d12c24d780edea46009e642ab8970d33ff0e7fb6ebdd2f91d41b4582762f3fc7b167c7a9184fa356f9b5f94631fe55309b7d54d97fd1cf408178d3a62b

  • SSDEEP

    3072:oXpMBTErTH7Xj5hL9Kam1/8Rd2t+j5eYWGAMH:8pMBTErTH7Xj5hLABCRdv1WGB

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://eu-west-1.sftpcloud.io
  • Port:
    21
  • Username:
    8e065e20d50941049d65f96f62357139
  • Password:
    26esZMYm4svydFPPVNZDGTMnq25MRawd

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2616-20-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections