Overview

overview

10

Static

static

10

2828-11-0x...ry.exe

windows7-x64

2828-11-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2828-11-0x0000000000090000-0x00000000000D2000-memory.dmp

  • Size

    264KB

  • MD5

    e7ba57d2f3114cb27fc4305ec03da4a8

  • SHA1

    2b0f48e4f267c95ec9b9849265e4f3dfa21ad9a8

  • SHA256

    5040d5c50e47d2656083fb6b25f04eb6241f1f1f949a2b4dde600e51c3563278

  • SHA512

    0bbccdeba6dbdf359e7ff92cd2ff6779a7d1b8f1a66601bf115cddaea4562a1341ec0632b805e1e5fe325a6dda016400293e49b84ac96a09ab7326804c07c5b1

  • SSDEEP

    3072:WjzKeCuKYYSQkQFC6givQTQ8dJ5M2j1O3Am:+KeCuKYYSQ1E6giITQSb1A

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.fosna.net
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    u;4z3V.Iir1l

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2828-11-0x0000000000090000-0x00000000000D2000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections