Overview

overview

10

Static

static

10

2104-18-0x...ry.exe

windows7-x64

2104-18-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2104-18-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    1a50ce490f5667692de858d9b1d01392

  • SHA1

    8c7c214e489682cfd6cc6343d670e58543f7edad

  • SHA256

    e8907ca5852f4e6ddf8a5a3134d9846962da285e2d66cc816ed3f6d3eefdb91e

  • SHA512

    247248e36209749f7ef3554a7179aeffdc0ba10801530e4c7e677565bb12edac53944fa501f69db605583aba1e15c526eab997e356b7b3f9eb2d19bfc1b8dc74

  • SSDEEP

    3072:0D9iPrnb/3HzmuqOqEzjmV0GixG5k+bfMPl:siPrnb/3zyOXCVLixsbU

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://stpindo.co.id
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    boygirl123456

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2104-18-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections