Overview

overview

10

Static

static

10

2860-9-0x0...ry.exe

windows7-x64

10

2860-9-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2860-9-0x00000000008F0000-0x0000000000932000-memory.dmp

  • Size

    264KB

  • MD5

    8649cc7c770263b1d3572e104286f107

  • SHA1

    9f324203089745cd12357450d3d6833eab55fa95

  • SHA256

    5870b8fb792701e9deebf9c9bb386f67adb57e9529c41e117adce3a9d724ea54

  • SHA512

    ffa8bfe1c4f005cb111fbcb2e262a3777a2e6cc83afbfbcffa68c5cbc4e4146b60f0476cfcaf6e12c6ed042804b808204bc5ea6231cd97a938b51649464cbf63

  • SSDEEP

    3072:f726qSCKzkEZP/wjrvIyPqX+XorW5xdJpWpi:S6qSCKzkzPgaM+XorMJ0

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.ultraflex.com.mx
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    Jgj8-p4Z]a1b

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2860-9-0x00000000008F0000-0x0000000000932000-memory.dmp
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections