General

  • Target

    988-12-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    a6872f36c2c186043060e7a4246abaf4

  • SHA1

    3d6bca0e7a208922aef66d4a4c5e5007dd75fbb5

  • SHA256

    2253c8b31fa0661e0060a7cabe7af8bf92accf00e36f52167e109d392173a2bf

  • SHA512

    073c67cc28df6098c9c80f9d7f99e226b3f21383d21b29414ef2ccfe4760736aeb92dd2cdaf75e74572ff38f02ff57e6dbc63e98fe9b8b436dec7174b42b3b6a

  • SSDEEP

    3072:oE8+JlxVZwGWwUt7h9UboZ6xKKPgB3Rp5qDQV6y:oE8+JlxVZwGWwUtTUbosxKigxREQo

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

Signatures

  • Agenttesla family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 988-12-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections