Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
statement.exe
-
Size
819KB
-
Sample
230310-q99r7afg7w
-
MD5
2504151a834e4a576c4bd75242dd8420
-
SHA1
e845ae88963495b0407a86dddbcd8821efafb4f7
-
SHA256
7e248e8f6ce44e38bfba175c422072de0d24e4bf39da833a3db40143f1a44a05
-
SHA512
f6eac3784f2dd499fc4c070149a4072e014ea41c057c80b04a9c5d16f50ca883e60f1b60b01be3bbfd975e5dd854afe53ba3e10cf7c26d47453b1442bc16fef9
-
SSDEEP
12288:gFlLKHFjcsqUWmh3WLexTbwAa7NE31ofk1WrbOQ+lXUwYrCs2FdTcLTFSYUWKUW:+mhukl31bknORlXpYrn4mTFSMO
Static task
static1
Behavioral task
behavioral1
Sample
statement.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
statement.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
us2.smtp.mailhostbox.com - Port:
587 - Username:
[email protected] - Password:
HNnNLPY3 - Email To:
[email protected]
Targets
-
-
Target
statement.exe
-
Size
819KB
-
MD5
2504151a834e4a576c4bd75242dd8420
-
SHA1
e845ae88963495b0407a86dddbcd8821efafb4f7
-
SHA256
7e248e8f6ce44e38bfba175c422072de0d24e4bf39da833a3db40143f1a44a05
-
SHA512
f6eac3784f2dd499fc4c070149a4072e014ea41c057c80b04a9c5d16f50ca883e60f1b60b01be3bbfd975e5dd854afe53ba3e10cf7c26d47453b1442bc16fef9
-
SSDEEP
12288:gFlLKHFjcsqUWmh3WLexTbwAa7NE31ofk1WrbOQ+lXUwYrCs2FdTcLTFSYUWKUW:+mhukl31bknORlXpYrn4mTFSMO
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-