Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
57s -
max time network
58s -
platform
windows10_x64 -
resource
win10-20220414-en -
resource tags
-
submitted
29/07/2022, 10:48
General
-
Target
mv GRETA - Bunker Quotation Request.exe
-
Size
1.0MB
-
MD5
cbfa66c8b577b871e78e9a9f05878e1b
-
SHA1
2185593c603f23bff3010682bf824ba6f01a090d
-
SHA256
ed2cc1531e6eb494f8eee05e24770a843f2e5d20652538d5fce7e88b42814c2d
-
SHA512
c969a9b28ade731d80709b045ee9d0e5068cd5dd24228b13566d25896d19a8b4102fe030797db3c5c9ca43cbf861ffe9b0e4213c4d1695c6606e69e58a7ffd53
Malware Config
Extracted
blustealer
Protocol: smtp- Host:
mail.dinamiksan.com - Port:
587 - Username:
[email protected] - Password:
ankara0606
Signatures
-
BluStealer
A Modular information stealer written in Visual Basic.
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\mv GRETA - Bunker Quotation Request.exe"C:\Users\Admin\AppData\Local\Temp\mv GRETA - Bunker Quotation Request.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\mv GRETA - Bunker Quotation Request.exe"C:\Users\Admin\AppData\Local\Temp\mv GRETA - Bunker Quotation Request.exe"2⤵
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.0MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
5.0MB
-
Filesize
1.6MB
-
Filesize
584KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
40KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
88KB
-
Filesize
40KB
-
Filesize
1.6MB
-
Filesize
944KB
-
Filesize
624KB
-
Filesize
408KB
-
Filesize
656KB
-
Filesize
1.6MB
-
Filesize
632KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
632KB