General

  • Target

    2612-28-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    4220dbbdcdcfeccaff19780bfe5af0e7

  • SHA1

    c33e234db47e1643b0646936d32fa0aebffdd907

  • SHA256

    3d6ef0dd9f70e47f2b034d681fb3fc330ff30b73e014ec6c384eda6f8d6d371e

  • SHA512

    31237061fa42b06dff1d9a3646df7503483ffa54f1b01000c4891ebc79db04417a64ba16f7e0eeafe39eb47f3134f5e77e96a0ea54ba2997dda493be12d0481c

  • SSDEEP

    3072:GWqhoXacffnnvj6SMTU3r7pKvBLs8j2/Hpwf5560GaXan4:GW/Kcffnnvj6SMTU3r7uLuHpwC0xX

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2612-28-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections