Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

1

AgentRansack_867.exe

windows7-x64

8

AgentRansack_867.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    AgentRansack_867.exe

  • Size

    14.9MB

  • Sample

    230614-xqyddacg8v

  • MD5

    7747481db9322b854024f98d43f57e2e

  • SHA1

    6af2115b473fde77a9dc958de4ff730eb25810ea

  • SHA256

    c5f5524e60adcb5019b33b07892da0a24822f5b85dfdc0419b256aee802f5811

  • SHA512

    b98be6fd4189133ff7bb74a86e751aebb62b67aa1f47b74ea73f116a44df42790709292928abef8b0666e4cff1e8a64e5b089818c413faed23cb73f173fa9587

  • SSDEEP

    393216:imhHKnM/cj1E1xXnc4g4wbsgz7hi+qyrU01EwZ9FDycyVWdhZ+:lInM/waxXaBI+9i+qP0i2hy3VUhw

Score
8/10

Malware Config

Targets

    • Target

      AgentRansack_867.exe

    • Size

      14.9MB

    • MD5

      7747481db9322b854024f98d43f57e2e

    • SHA1

      6af2115b473fde77a9dc958de4ff730eb25810ea

    • SHA256

      c5f5524e60adcb5019b33b07892da0a24822f5b85dfdc0419b256aee802f5811

    • SHA512

      b98be6fd4189133ff7bb74a86e751aebb62b67aa1f47b74ea73f116a44df42790709292928abef8b0666e4cff1e8a64e5b089818c413faed23cb73f173fa9587

    • SSDEEP

      393216:imhHKnM/cj1E1xXnc4g4wbsgz7hi+qyrU01EwZ9FDycyVWdhZ+:lInM/waxXaBI+9i+qP0i2hy3VUhw

    Score
    8/10

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks