General

  • Target

    700-11-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    73d1ce607d71a05aa8f3d648ce8aefd6

  • SHA1

    73768f5f983c02f131b4105eae873e9eaff466aa

  • SHA256

    d87d89931a3037d7135f9e3eb8724c0cba372f6c68ffb0de6143ec2003b2515b

  • SHA512

    aae49a1a0cbee860a8c9b70181836d5d16b2e302772d2f3ab39622f2c083a026fd31d6a4d4e6fc80e7ff57af5329988696714a11c914747d92bf112802cce7fd

  • SSDEEP

    3072:kjtnGRt/7IBFM9rtTr1OXnpKBGtR1WFvzcq5m0E5J15NpRg9tB10:kjtn8t/7IBFMjZOXdDyQ6m0UJfRgb

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot7060813422:AAFqFKdMJlLvutqPAnHO4f8vnk2X1rQvsl0/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 700-11-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections