Overview

overview

10

Static

static

10

2640-13-0x...ry.exe

windows7-x64

2640-13-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2640-13-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    4a1bd8afff12a45e8144ce38077681e0

  • SHA1

    414904c6902b844dc19d7b84306c0fa96e781982

  • SHA256

    7c08962948f94bc40e98f82ef3afae47c9ab56bfda54bb7be6167f5c796d67ac

  • SHA512

    8301b194a39dc25c8d050688d1937cfa6e16d4dc2b620bb5d48921d6c18274f96c8a947ba3dcd529eb4c4f98426842c341e324e621389368591092d6efa5c37e

  • SSDEEP

    3072:BBTu8AUgs5LszvUafptJSTUA5tMuNA5sv/b3U:TTu8AUgs+zvUafpt8T95tMuNN/T

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://eu-west-1.sftpcloud.io
  • Port:
    21
  • Username:
    91687a7459034251bf46decf042c73b6
  • Password:
    TT70ddky2yNKGpkX1I1OBsDlEcGIaUsv

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2640-13-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections