Overview

overview

10

Static

static

10

2568-30-0x...ry.dll

windows7-x64

1

2568-30-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2568-30-0x00000000003A0000-0x00000000003F6000-memory.dmp

  • Size

    344KB

  • MD5

    b0d5f7762bb20b994c9bc054d3d4cc43

  • SHA1

    09a5a5e8379f69452dba25a795f7a423794f8c74

  • SHA256

    2c228cb61085259459490c4cf9c6c82143afb6a24b8b7e40d27a1d88095f23e9

  • SHA512

    2e675323ccb32629c637e1516092672385c8d91c1beaa5a552591db4baa5491191849487412ea86112f966f9d2682e1148eb446df784d2a758a661e23c98ce09

  • SSDEEP

    3072:+rYSeyGyYtW5FCdysjfWos+Ke8Az2Rju2D3ao7l4s2A0tTaR5ss+57:UYSeyGyYtWg7jfWos4NAD337laACTES

Score
10/10
zgratagenttesla

Malware Config

Signatures

  • Agenttesla family
    agenttesla
  • Detect ZGRat V1 1 IoCs
  • Zgrat family
    zgrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2568-30-0x00000000003A0000-0x00000000003F6000-memory.dmp
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections