Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
77de942cc353d0039e417fc713a0e9ac0e0ba656c0550306fbe80099b58da28b
-
Size
196KB
-
Sample
230110-j5pswsbb4y
-
MD5
79614b62d3bba7ecbd5bbf52853a19af
-
SHA1
494e94c830fa9a7860f2d834042d0c19ea863476
-
SHA256
77de942cc353d0039e417fc713a0e9ac0e0ba656c0550306fbe80099b58da28b
-
SHA512
209bf7592d45a0f14af549ea2b40f7e6824d67c29670dbc5751273b87895694838cd28eb29ad50c56f048790d6545150c38996d246551539c7d51032e01075d3
-
SSDEEP
3072:wJ89MLHabeiLOr4KYgpvpmx5UFkpydpvqJAAj3ITKvJmnw7MIrup2:xKLCKPa5UepydpiJAAj3bJB7lr
Behavioral task
behavioral1
Sample
77de942cc353d0039e417fc713a0e9ac0e0ba656c0550306fbe80099b58da28b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
77de942cc353d0039e417fc713a0e9ac0e0ba656c0550306fbe80099b58da28b.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
agenttesla
Protocol: ftp- Host:
ftp://ftp.cleaningagent.xyz - Port:
21 - Username:
[email protected] - Password:
9L4dBJBZ,kIQ
Targets
-
-
Target
77de942cc353d0039e417fc713a0e9ac0e0ba656c0550306fbe80099b58da28b
-
Size
196KB
-
MD5
79614b62d3bba7ecbd5bbf52853a19af
-
SHA1
494e94c830fa9a7860f2d834042d0c19ea863476
-
SHA256
77de942cc353d0039e417fc713a0e9ac0e0ba656c0550306fbe80099b58da28b
-
SHA512
209bf7592d45a0f14af549ea2b40f7e6824d67c29670dbc5751273b87895694838cd28eb29ad50c56f048790d6545150c38996d246551539c7d51032e01075d3
-
SSDEEP
3072:wJ89MLHabeiLOr4KYgpvpmx5UFkpydpvqJAAj3ITKvJmnw7MIrup2:xKLCKPa5UepydpiJAAj3bJB7lr
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Accesses Microsoft Outlook profiles
-