Overview

overview

10

Static

static

10

1136-17-0x...ry.exe

windows7-x64

1136-17-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1136-17-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    ea1576563b30c3c5c80ed0313372d667

  • SHA1

    9460beae92c26663cd8ae5cccbb4393c8ec79dca

  • SHA256

    d549af4e776659c4d27edf420455fc0e1291ed033bdd06d90165728890029200

  • SHA512

    06d66cc957d8f2f7783da29b80bf48ae17f5d0ed485809b324fdcf257c9cd2598335c42b78164818f9339b80053d13295f52dce14c9b26ec96b2810f421c0c64

  • SSDEEP

    3072:Aa6lbbTH7Xj5MqZZUNo8HIWVMasFgA5SgzWlbq:B6lbbTH7Xj5MqrUn97sFgAWl

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://eu-west-1.sftpcloud.io
  • Port:
    21
  • Username:
    fd5e120664034712b080a5f7c55798db
  • Password:
    sXMLzWIEGmwO68AabkfkhURNCxoEL5PH

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1136-17-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections