General

  • Target

    5096-17-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    83cbd6de534624b3104d587a90edc424

  • SHA1

    6746ae0ca475896d60b4aef8057c843824b137ae

  • SHA256

    ab98c3c03a6af04cdb17eace976d645ac42ae70d3304ac958a0c8acf3e7ac149

  • SHA512

    e0e68b1c7aced038acf46012d764e593271829980c4e64170bbe909616e9f200459f9fc7a2ad0f2f75275766a3949f93ecaa5202c7fb30e8a348aff174bfeb2e

  • SSDEEP

    3072:Izn1g848gAcdigWCIwzFgd628Ji545685pULgP:Izn1g848gAcdigYwzFgd61JV685+L

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6471994916:AAHkdjLXxo_sOhOEXeFpgGf4NrHiZGX6HD8/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5096-17-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections