Overview

overview

10

Static

static

10

2468-19-0x...ry.exe

windows7-x64

2468-19-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2468-19-0x00000000007B0000-0x0000000001812000-memory.dmp

  • Size

    16.4MB

  • MD5

    bfcc8dd62d0aff287344b0455c9a21e2

  • SHA1

    9f8ad5bfdbc3045c20a23b2b59edd22186c89bb6

  • SHA256

    b00fc0b06e0842b434331f160dd0e2f3965ee85848f886c2a97fcc2afd71701b

  • SHA512

    43442efb0ebf5e85ce258a6e89d726aa81290a2ea03bc56baa4af2c54bf7b538c9c1890222f2ccc916c6b7fa51a3fa3da676d322fb3d3ced8fb0fa24a02e513d

  • SSDEEP

    3072:mHboW+m+24tpCXRJAKT0zZ0XkH85GxC5RPBLF0A3:fW+m+2+CXRJAKUMz5GxaLqA

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.piny.ro
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    playingboyz231

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2468-19-0x00000000007B0000-0x0000000001812000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections