General

  • Target

    2712-18-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    6ad88bad4cd79e79bb2c197f8a64f6f6

  • SHA1

    b2fa858853c4332a826df6b77b6aceb3e817f76a

  • SHA256

    f4c8a35fae371ce9ad67d2abdda6c139328f7bdb511e9eda519e47b0444e9a22

  • SHA512

    b58959314330b4c5f968ef33151f4c85bd2a2df6c95c18e2a2a72b78d6dba1d996a98e01717ac28076c978008943b72e702d9eafb9c8aadcf23136ba8a030d5c

  • SSDEEP

    3072:vpICpuCgu+euedjvVWJGyYiT5dzPgd9Ptq:vpICcCgu+euedjvVuYiTbgdx

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6398508790:AAFROO4FvHYek5_hchyogAsV7yTvxfINRRg/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2712-18-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections