Overview

overview

10

Static

static

10

2332-25-0x...ry.exe

windows7-x64

2332-25-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2332-25-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    d4525af6780e388f32fc7b1bfbdb6553

  • SHA1

    3cc561281a2d1e103636ec90eb8610d8dfe86330

  • SHA256

    0f5d84ae7a317f05ed3c72dbbfe36dbd03cc7c4d819153c5faa6c5592689b717

  • SHA512

    b453305e8f116f8cad5ada1ff9805578e213a374d19efe4fd7cdc9eba1d4717a4d7e9a3693237c4ce4d1ec5734517d96f81dadaded202a46f05d3adc9f393be8

  • SSDEEP

    3072:aQPnRhedZdx9Mb4lRfNAti79ThrXriNuIBtlz8Qqe5Z3362uMnJ:cdZdx9Mb4TTNXrihlz8Qq06T

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.kenvue.cam
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    f}ix4QQMqoW1

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2332-25-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections