Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

FUCHUNQUOTE04830A.exe

windows7-x64

10

FUCHUNQUOTE04830A.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FUCHUNQUOTE04830A.exe

  • Size

    652KB

  • Sample

    240124-l9cp8sffgr

  • MD5

    37224ce3d19f313161c87a07fb839498

  • SHA1

    c3292850a8e2654cd076ef9d33ef3f3aba268761

  • SHA256

    d1eff45d764dbbd9e9fc345263b8b7f3b39996d4dd57b3c3ff4dd57215faad07

  • SHA512

    b239a42ad5c4bfa0a8d1d891707856fb10dc1dcbb477c001282ac84e2b8f4a8e0e02335da0c5e786c9886f44c6c32a51e32667e3fa3277d4c0306c1682cdc951

  • SSDEEP

    12288:P3jLBJI3sPDy0fvtHkzOnuh3zLNVpKgZYHBw1Y8EvT8fgf3nRh:/jrusrFf2znh3zL3YHBJvT84r

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Targets

    • Target

      FUCHUNQUOTE04830A.exe

    • Size

      652KB

    • MD5

      37224ce3d19f313161c87a07fb839498

    • SHA1

      c3292850a8e2654cd076ef9d33ef3f3aba268761

    • SHA256

      d1eff45d764dbbd9e9fc345263b8b7f3b39996d4dd57b3c3ff4dd57215faad07

    • SHA512

      b239a42ad5c4bfa0a8d1d891707856fb10dc1dcbb477c001282ac84e2b8f4a8e0e02335da0c5e786c9886f44c6c32a51e32667e3fa3277d4c0306c1682cdc951

    • SSDEEP

      12288:P3jLBJI3sPDy0fvtHkzOnuh3zLNVpKgZYHBw1Y8EvT8fgf3nRh:/jrusrFf2znh3zL3YHBJvT84r

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks