Overview

overview

10

Static

static

10

2540-30-0x...ry.exe

windows7-x64

1

2540-30-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2540-30-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    5eab812bce64d8726169c90ccfab1d54

  • SHA1

    f8bfdc61e2bf65a1cce227055a8034adc7bf4a73

  • SHA256

    714a01f66f2f3c00dffe9eac5292703165518dc3772fede1aa5edab03d4a0969

  • SHA512

    65e6ecd0751c2396ffbf15b326119f345e4db9ff7922583f3d10e9d999449892477394644df4b7d12a014546d31e58bb27768bb8df759a132350552e1966a673

  • SSDEEP

    3072:VotNJfi5FZdJEC1HkQeiJHerghQlpf5szvToFfQ5zo:VotNli5FZdJEC1EQeKggOp4ToN

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6482470028:AAGZWx1BlNfwbuuivGJ_bo3pyIfyxVKC0hI/

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2540-30-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections