Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2252-6477-0x0000000000400000-0x000000000043C000-memory.dmp

  • Size

    240KB

  • Sample

    221104-c398gsacf5

  • MD5

    2167f8e8644996a9389244a855465e00

  • SHA1

    9c07c8bab03b5d81c68f5fe898925feb299414cb

  • SHA256

    a0241bda3fa4967175e287eb4a15a1269cc98d3602e17858e63c68cc90262a16

  • SHA512

    a2f1d4e26559a0fe3b4d69f3a205f8ddf0024d11b7f113eb5f5dfaf6b231781a0982c04fed44fa79da08d8613bfca5c6c6ffab3d0b557c0b3b736514301ba66f

  • SSDEEP

    3072:NTnBnKZy1jinp5LvIUHABDBMrePj7F5UKnMKNufFUyh5P5//m07ZXS+cRYUpDQT4:NjBnhmnpVOWgnUkMnzhl40JOKzN7zeg

Score
10/10

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:
    ftp
  • Host:
    ftp://192.3.223.202
  • Port:
    21
  • Username:
    ftplogs
  • Password:
    sPkZ7jK7P6aA

Targets

    • Target

      2252-6477-0x0000000000400000-0x000000000043C000-memory.dmp

    • Size

      240KB

    • MD5

      2167f8e8644996a9389244a855465e00

    • SHA1

      9c07c8bab03b5d81c68f5fe898925feb299414cb

    • SHA256

      a0241bda3fa4967175e287eb4a15a1269cc98d3602e17858e63c68cc90262a16

    • SHA512

      a2f1d4e26559a0fe3b4d69f3a205f8ddf0024d11b7f113eb5f5dfaf6b231781a0982c04fed44fa79da08d8613bfca5c6c6ffab3d0b557c0b3b736514301ba66f

    • SSDEEP

      3072:NTnBnKZy1jinp5LvIUHABDBMrePj7F5UKnMKNufFUyh5P5//m07ZXS+cRYUpDQT4:NjBnhmnpVOWgnUkMnzhl40JOKzN7zeg

    Score
    1/10

MITRE ATT&CK Matrix

Tasks