General

  • Target

    2132-5-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    321a019bc8e0550e60ba3a33f079dbe6

  • SHA1

    e453ce76165e0adb8414bbe19841e0363f12302c

  • SHA256

    a8a2857bede7974cb72de0531240cee4988016febe8be25f0d6f1d96f0679b6f

  • SHA512

    ad6ac15f7f06a981e1689cf15d42afcce9b3f664a637ada1f1f60cc24dc945b2a33b43f9b7cbd55aa2048704e3d06d3c70ce2a4846b9c8a29681280f3d3708cd

  • SSDEEP

    3072:+21ny77zD74+ULpmbJ7nEyDMqj2KUSBxASsFS5KgGS15QNRw:+21y77zD74+ULwlNwq7bNsFkGyi7

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6240128422:AAF7aTH7FGKc_SgTU8RSJCEYKLPy-8sV1rU/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2132-5-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections