Overview

overview

10

Static

static

10

2592-11-0x...ry.exe

windows7-x64

1

2592-11-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2592-11-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    ef1a85ef2c24fb68f637be060b07eced

  • SHA1

    3c8fe55f637d90c18dc97bd375e7571b524c547f

  • SHA256

    30b0a7e7226d540bc91919194883a48c0189440f4f2a1d2596d0b72ce6842296

  • SHA512

    ccd3475e672aa65332f9eec4658b84648656e337347ddd3fb27150d0200a094c174a0554b8bc73c9eb913ecf2d35f41285b80be5a5950706effed4675692b1fe

  • SSDEEP

    3072:kNaFARcPDvLfM70hNNaI2QIqawS2FonkAbE5TqobFiSrluu:kNaFrPDvLfM2AqaAqnkAbvob4

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6698844298:AAF9oR0Jf7k4zXD2nMFwUYBsEQgGIs_Be9c/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2592-11-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections