Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

Geradores_3.exe

windows7-x64

10

Geradores_3.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Geradores_3.exe

  • Size

    1.2MB

  • Sample

    230807-we54eagg52

  • MD5

    27c261e6b9cf5cbf049e873dd4a69ca0

  • SHA1

    d5f54cea7934881c22531ea65e2ddb7062683dd2

  • SHA256

    6949492e68b7c20221d0ad5102bbbcacba1a1705eb5e1cadeae54f9c53c5d256

  • SHA512

    7fe3929d586d4d7c708eaa8b955ce5cd77b368a18bdd7ef5219b629290fb037483fb44487217436723874adde9f200b0d329a2333944dd1506b1147fa9594ca8

  • SSDEEP

    24576:svMZvMNyvvMNyQdngwtlaHxN8KUWVe6tw2wvKhLnekqjVnlqud+/2P+AdjvM:duNBNhdngwwHv5VbtHw1kqXfd+/9Au

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Targets

    • Target

      Geradores_3.exe

    • Size

      1.2MB

    • MD5

      27c261e6b9cf5cbf049e873dd4a69ca0

    • SHA1

      d5f54cea7934881c22531ea65e2ddb7062683dd2

    • SHA256

      6949492e68b7c20221d0ad5102bbbcacba1a1705eb5e1cadeae54f9c53c5d256

    • SHA512

      7fe3929d586d4d7c708eaa8b955ce5cd77b368a18bdd7ef5219b629290fb037483fb44487217436723874adde9f200b0d329a2333944dd1506b1147fa9594ca8

    • SSDEEP

      24576:svMZvMNyvvMNyQdngwtlaHxN8KUWVe6tw2wvKhLnekqjVnlqud+/2P+AdjvM:duNBNhdngwwHv5VbtHw1kqXfd+/9Au

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • AgentTesla payload

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks