Overview

overview

10

Static

static

10

2872-20-0x...ry.exe

windows7-x64

2872-20-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2872-20-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    4b20e952fb4652d7a243c46b5f2c2950

  • SHA1

    f45e64f8cba8268c2215938e2e5edb7f10a78ad8

  • SHA256

    849e9820089e09e60d195e5d256e2e5da1e43999c6c8f4cc816d0c30a657c79c

  • SHA512

    aef13396c52925c4c2fbe47178735a507e719ba128ea9f83a35528b67a59d3c4fead3d1ec164502b04253f4a0d5c161a05381e9db7b1d7d586650523440e077d

  • SSDEEP

    3072:U66TkFSvgYwybccb+aVeiuZYijX5Tig16DHxO2r:d6TsSIYwybccbhSl5iQ6DHf

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2872-20-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections