Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
b88212aa343596ae71744b662e0895c3.bin
-
Size
85KB
-
Sample
231103-ddyntsba3t
-
MD5
ba1c2bc1b79dd3c8f8cb51c4976b7f61
-
SHA1
9a4c355a8eddd0d93dd5cf9e2cbf0153c9414079
-
SHA256
cd8f4d9dc4dac49b6bcdb3146afa2d5365dbbd8f1b715e43a74cc3c5cd1d7f75
-
SHA512
f081b31cdcd096b083683032489b343b1e19e4cad4c4a58e961d85751975621ae5bf0a6d9c31fddb9ca9aaf539adb61ff16872fffe63b6827fe57d21a13b7edd
-
SSDEEP
1536:ziNxZW8+HsqKlj5rjYZPUcNOONzuuyINKGK/pS/j2rLNDU1xqaK8Mtdttjp:zitjqErMdM+yu4UrCBDU1xDr2dtRp
Behavioral task
behavioral1
Sample
d2d1c043548b77e3e0ab6d5f4ac09e7809e11005a73032ad23dbcfa561123dab.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
d2d1c043548b77e3e0ab6d5f4ac09e7809e11005a73032ad23dbcfa561123dab.exe
Resource
win10v2004-20231023-en
Malware Config
Extracted
agenttesla
https://api.telegram.org/bot6726448718:AAFNb-LBktH8UJpC8JcapANsgwJ2jswG9HU/
Targets
-
-
Target
d2d1c043548b77e3e0ab6d5f4ac09e7809e11005a73032ad23dbcfa561123dab.exe
-
Size
242KB
-
MD5
b88212aa343596ae71744b662e0895c3
-
SHA1
22d84653ff8ac51cd462c1ecef68d973b38fbc0a
-
SHA256
d2d1c043548b77e3e0ab6d5f4ac09e7809e11005a73032ad23dbcfa561123dab
-
SHA512
a0746a47daa568ea72eb779e7e650e3c357e043f551fdfc1ba45ea12117a4538f088572bbb2cc3417de0274de3d017e120aa6bbb5e5f37ed99b703d128d2de02
-
SSDEEP
3072:0rT1cv3nffK+cp1ICXeMh1Muwvyvx5sB2BUdVT8:4T1cv3nff9cp1ICDTxO4wcBUz
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-