Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2532-22-0x...ry.exe

windows7-x64

2532-22-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2532-22-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • Sample

    240111-cx3apacggj

  • MD5

    ca0290d4cc94bcb8899f07ad348f2a01

  • SHA1

    8c2149a8ca30a897ced5f3c23e2516d05cf8f394

  • SHA256

    8720fafcd660554636895241053d141b49f4dacf16e749ea859010a761c7849e

  • SHA512

    c793925b11b20beb733d785bf4c2ca0e5d7843357fdc25b9c514a9ee359674c185ba6ea72d4e605398ac99ec8ad1f11007987dae5d4486c39f86263e881a542f

  • SSDEEP

    3072:xRY/ZUAMw0V+3Jdl6PNpPa4kbYQ57+D93Fy:bY/ZUAMw0V+3rl6PNFa4kbYMO91

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://eu-west-1.sftpcloud.io
  • Port:
    21
  • Username:
    f27ea63fd3cd44ea9c8de4b2faa424fb
  • Password:
    4AOVP8idnlxzVmyt8FU3oxcJ2EfEW4R9

Targets

    • Target

      2532-22-0x0000000000400000-0x0000000000440000-memory.dmp

    • Size

      256KB

    • MD5

      ca0290d4cc94bcb8899f07ad348f2a01

    • SHA1

      8c2149a8ca30a897ced5f3c23e2516d05cf8f394

    • SHA256

      8720fafcd660554636895241053d141b49f4dacf16e749ea859010a761c7849e

    • SHA512

      c793925b11b20beb733d785bf4c2ca0e5d7843357fdc25b9c514a9ee359674c185ba6ea72d4e605398ac99ec8ad1f11007987dae5d4486c39f86263e881a542f

    • SSDEEP

      3072:xRY/ZUAMw0V+3Jdl6PNpPa4kbYQ57+D93Fy:bY/ZUAMw0V+3rl6PNFa4kbYMO91

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks