Overview

overview

10

Static

static

10

348-11-0x0...ry.exe

windows7-x64

348-11-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    348-11-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    63c275f272bc61a26608d7e1b34c2f5d

  • SHA1

    b3bcf4972bea5b6f1353694f43d5e7879e95dac1

  • SHA256

    83a4c2fa0d25d51e6485e07d587d9b66db6cd820464fce72fceef193a2466895

  • SHA512

    fcab1001b30e73111c3f75bd61fac77594fc5bb55465d16135569633611aa2cb8aafb3fe11562c484d86a9d34ec717c9f0f406a0beee1c9fbd53ef7d9f03b3b8

  • SSDEEP

    3072:UHgsgEwHIV83hjM1iwot7Zsp3JC5p0T7a05vY:cgsgEwHIV83ho1ijpZsp5u+7j

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.stingatoareincendii.ro
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    3.*RYhlG)lkA

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 348-11-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections