Overview

overview

10

Static

static

10

2788-23-0x...ry.exe

windows7-x64

2788-23-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2788-23-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    79092c10c9e4066cd0098b48ef73e3c3

  • SHA1

    52156adf2739435cfcc5cb1822920b2728982d53

  • SHA256

    96c69536c694f03c12970efd146fb554480a0160fd88e4822869ac5a5014b4a6

  • SHA512

    d17a996a0b6d7ffa7839ccb0d9c882aa08e751b4bc239d36edffd6aa80e2b73f03505a3e345aad6cc27e2b3bd9f2a3f9acf0529641d9d21a5ff22056e42bfb77

  • SSDEEP

    3072:Q+gco8gW7wB02UR3QhcLfntFw5mcELlJpC:Q+gco8gW7wq2UqhqfntF4ERX

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6708321519:AAH9WPgZQN8mlLl2zn6ccUEu4DYMqGCeTcQ/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2788-23-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections