Overview

overview

10

Static

static

10

2052-40-0x...ry.exe

windows7-x64

2052-40-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2052-40-0x00000000007F0000-0x0000000001852000-memory.dmp

  • Size

    16.4MB

  • MD5

    c34496c0a49eda460d0d7b982caa42f0

  • SHA1

    830ddfe500f5ef6b05b164985729b54e5f3e8924

  • SHA256

    22f73029239ac2e5b3d9b793b2fcb5a13d59387682504d7c358359b7fbecc1a9

  • SHA512

    8e0dfa6cc4415962f5281709b3ed448a4d7761b82c8e28d346352a418e9b78956d7f1892cfb7ac4e083855176dc46a2e46b11492020cd979b0587dbc0c5346e1

  • SSDEEP

    3072:F8i6KyCUe70Egj6dQeP0f3yH+O2YzAH51GUuC7Y:Wi6KyCUlEPY3yH+OlzAuU1

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://mail.hearing-vision.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    LILKOOLL14!

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2052-40-0x00000000007F0000-0x0000000001852000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections