Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
1142c04f790d684080f3b80c61dce80a1250038e681a4546559c272fc93708c5.exe
-
Size
1.0MB
-
Sample
221102-l8gb2abgap
-
MD5
0bdbed1494189c8f65584d0fd6e09ad1
-
SHA1
b5647bc7427b3aa54fc383c0770ed8520ab2cb65
-
SHA256
1142c04f790d684080f3b80c61dce80a1250038e681a4546559c272fc93708c5
-
SHA512
8a9ccea7ca6dd56dd14d93ea03de2915ad6d335c993780d630de257fd1f63a8f4465a95fc3820cff656378e0e6e77f385556d917f0facee30edfe2ce3200750f
-
SSDEEP
12288:Fu7g9lGakOPFfts1dxk8idwhuJ9zps7CVmPEiIlBgVKX3zfRC7XFbusSenoHYu:AkvfYdxkCuJLs7yVmgnzfRiFbuf2oHY
Static task
static1
Behavioral task
behavioral1
Sample
1142c04f790d684080f3b80c61dce80a1250038e681a4546559c272fc93708c5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1142c04f790d684080f3b80c61dce80a1250038e681a4546559c272fc93708c5.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
1142c04f790d684080f3b80c61dce80a1250038e681a4546559c272fc93708c5.exe
-
Size
1.0MB
-
MD5
0bdbed1494189c8f65584d0fd6e09ad1
-
SHA1
b5647bc7427b3aa54fc383c0770ed8520ab2cb65
-
SHA256
1142c04f790d684080f3b80c61dce80a1250038e681a4546559c272fc93708c5
-
SHA512
8a9ccea7ca6dd56dd14d93ea03de2915ad6d335c993780d630de257fd1f63a8f4465a95fc3820cff656378e0e6e77f385556d917f0facee30edfe2ce3200750f
-
SSDEEP
12288:Fu7g9lGakOPFfts1dxk8idwhuJ9zps7CVmPEiIlBgVKX3zfRC7XFbusSenoHYu:AkvfYdxkCuJLs7yVmgnzfRiFbuf2oHY
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Accesses Microsoft Outlook profiles
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-