General
- Target 2872-13-0x0000000000400000-0x0000000000440000-memory.dmp
- Size 256KB
- Sample240521-eb5vssgd79
- SHA256 ae5ae2b550eddf42886449c77876d19bdfc241da601e31b608b4a1e33a75913c
- MD5 abc644a8d11349b4f1e0b809366378ae
- SHA1 69661842fe57a218d5562251aed80405fc4c816e
- SHA512 d9ff4a06cd127cb70867e1ca6f4cfd67d84108ce1a559b1a1e5b21e8d6e7dfa24bca20c03435840493fd199818bb10e044833bb9d888b37a28907c870e82622b
- SSDEEP 1536:9HSl55YAvw8gUAjkxheaMLu58iCAyB5xkn9+WHm09ceo2zS+5RmNxs4OLk+FsDqn:9GPxvw8gUAjDaTMk+hehS+5wNJOLk+
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2872-13-0x0000000000400000-0x0000000000440000-memory.exe
Resource
win7-20240508-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2872-13-0x0000000000400000-0x0000000000440000-memory.exe
Resource
win10v2004-20240508-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
agenttesla
Credentials
-
Protocol
ftp
-
Host
ftp://ftp.tekserendustriyel.com
-
Port
21
-
Username
-
Password
chuzy2024@
Targets
-
- Target 2872-13-0x0000000000400000-0x0000000000440000-memory.dmp
- Size 256KB
- SHA256 ae5ae2b550eddf42886449c77876d19bdfc241da601e31b608b4a1e33a75913c
- MD5 abc644a8d11349b4f1e0b809366378ae
- SHA1 69661842fe57a218d5562251aed80405fc4c816e
- SHA512 d9ff4a06cd127cb70867e1ca6f4cfd67d84108ce1a559b1a1e5b21e8d6e7dfa24bca20c03435840493fd199818bb10e044833bb9d888b37a28907c870e82622b
- SSDEEP 1536:9HSl55YAvw8gUAjkxheaMLu58iCAyB5xkn9+WHm09ceo2zS+5RmNxs4OLk+FsDqn:9GPxvw8gUAjDaTMk+hehS+5wNJOLk+
- MD5 SHA1 SHA512 SSDEEP
Score1/10