Overview

overview

10

Static

static

10

2976-8-0x0...ry.exe

windows7-x64

2976-8-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2976-8-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • MD5

    172cb2d3fe7401ef8b3f83ef0f70cd9d

  • SHA1

    1e37648c0bad43db97b8b146c83c4ef3c5936def

  • SHA256

    20a9c3091cb0d7c7bf8133f4f483f8010febeed5a6b8af00d1c10aa4142895e3

  • SHA512

    077ac92d7901d5855d55cf01d747ac952e94284a67fc1abdd630f14b9319948124553cfc296f3b453f2f27cb1692d2444675e5a648033727596c358335bfadbe

  • SSDEEP

    3072:jVgrpqdAcY8gg3yV/nUGukY5I3UZUmYWB5BCQv5ygvW9/R:KlqdAcY8gKyKGrY5WdXo5BCQ/vG

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.elquijotebanquetes.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    -GN,s*KH{VEhPmo)+f

Signatures

  • Agenttesla family
    agenttesla
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2976-8-0x0000000000400000-0x0000000000442000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections