Overview

overview

10

Static

static

10

2592-28-0x...ry.exe

windows7-x64

2592-28-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2592-28-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    237a95931ea7dd29bb0fedf056634943

  • SHA1

    46a56eefcb49419633a842a18b0b67f19dce712a

  • SHA256

    8a6b5ae4d415de766b14f6b7c4f2b69f2ecc15947aaf4be68b16b8770141551a

  • SHA512

    97a787c49757ea524075eeb6ac1797301d521cd97154c0fa53abc31f0e4b8f0481d60c835409edb79d8e0bd54554f9e625425c64dfda1ce18525be92daf730ec

  • SSDEEP

    3072:Q+gco8gW7wB02UR3QhcLfntFw5mcELlJpCZ:Q+gco8gW7wq2UqhqfntF4ERX

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6708321519:AAH9WPgZQN8mlLl2zn6ccUEu4DYMqGCeTcQ/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2592-28-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections