Overview

overview

10

Static

static

10

2304-9-0x0...ry.exe

windows7-x64

2304-9-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2304-9-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    9f41da7d83a69ac6eebd9db41554bf28

  • SHA1

    574e052bac9449d72f89b732dcd74f052c1d8950

  • SHA256

    f0f4f154d7ef5de5cb8ab161bbb066a581801f8b7dcd16650e4a5b8965454b7f

  • SHA512

    b55a0cce29404b5f852dadb06fb6f4772ba5e8b8008167ab0479250087d14931f67794247541a43179edd531a8b8b7f544ed1e68a028fb49e49496518d9e2023

  • SSDEEP

    3072:E4nsw8gUA1DqkFIzLM57zZKFNWQAi5bHNmQ:nnsw8gUA1DqkF2o5xmNWQAWNn

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.wapination.net
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    sync@#1235

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2304-9-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections