Overview

overview

10

Static

static

10

2920-38-0x...ry.exe

windows7-x64

2920-38-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2920-38-0x00000000007F0000-0x0000000001852000-memory.dmp

  • Size

    16.4MB

  • MD5

    0202ba40913b24317e983d21970d501d

  • SHA1

    a5e165590c0dd658c950fa35dd6162b7fdada801

  • SHA256

    304531b4d07785568966f7a022e9ccd31ad440368ef91e9f740cf1930db332e8

  • SHA512

    a9fc9ce4a8c0f2fb84e18fec6481a50824d0fcde33be46326da422b32523770f2304bd73932d6055b6da7966d5a9caeed4d068ff8c0679d7cbe70e6016dcb34a

  • SSDEEP

    3072:c8Cf0SPt/0nb/bHoyZYJi90ABQ3ItBL5VN95AUYSIJIHre:pCf0SPtcnb/bHoyCJgqItl5VNVYSI6

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.atisceramiche.it
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    boygirl123456

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2920-38-0x00000000007F0000-0x0000000001852000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections