General

  • Target

    2736-29-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    e528bb67366cd653ff753b114baaa346

  • SHA1

    3b4a28477e8198b8c6eeda7a6ad3d5909e6ec3ef

  • SHA256

    4fcf040744a6831757d90565a1f06bd2726596768f957d4234673bcc2fc2289d

  • SHA512

    7e9f0da98d30f8d2aa44e3b89537458b733302ab14b8b5a685bb2c634b6a5d2d4846f7a9b063c7a7eed5c57fd73a4774899be2e488aadc46da64c24dba121f7e

  • SSDEEP

    3072:MsUqShjy6yaCYHb+lDzVuXn9Phn755rh4xsnD:MsUqcy6yaCY7+lDzV4PhnTh4e

Score
10/10

Malware Config

Extracted

Family

agenttesla

C2

https://api.telegram.org/bot6937426667:AAH5h4aXvUjmlMFV8im9A9lKn7JS7MyNHLA/

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2736-29-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections