General

  • Target

    2412-16-0x0000000000370000-0x00000000003C4000-memory.dmp

  • Size

    336KB

  • MD5

    685dd41645c5a01ba15cac6c4dd91c41

  • SHA1

    a311a32e05142ada7a5cc66abc439df2bda2c219

  • SHA256

    946f8bac2ee69449b6067e4a9dfa580880e5c764811090b277970f2717640f07

  • SHA512

    5efdb9ee32d157310c247fb83d0c37b2a2a77746916af8eea0e52c513c7d14266a04b9b8267a3cf432238b4ff31a7f1df8a693ddfa52ecea1ad3d71defeae03a

  • SSDEEP

    3072:K2WlN+915FR1JiqKSmC09+WT+RfXslTqwzPTdivG+Fa+iFElRmv6y6LbV9nl:KhlA5FR1JlnmbiRklLbTdWDiClMjGb

Score
10/10

Malware Config

Signatures

  • Agenttesla family
  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2412-16-0x0000000000370000-0x00000000003C4000-memory.dmp
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections