Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

d231a87455...56.exe

windows7-x64

10

d231a87455...56.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d231a87455e3c229a2c1ef27dfd65f76858c73c07f6a214fcb157e96ec279856

  • Size

    1.3MB

  • Sample

    240203-bjmseafgfq

  • MD5

    2d50f018d166d7542d36f50de2531b15

  • SHA1

    3983a84e1e326253cc3bda99b03c3e4df25d9eca

  • SHA256

    d231a87455e3c229a2c1ef27dfd65f76858c73c07f6a214fcb157e96ec279856

  • SHA512

    bd48a25ac512c0aefe39a94a6dcafbac7d1b2cf31d66cf002a578a9101ce6e1be2c728fb55c553f47fddb042ff5b66d6aa1ace0a8427217a558d012c6548b2ee

  • SSDEEP

    24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaGWLJxzB2wzyaGHuMOnSw35:gh+ZkldoPK8YaDLIwz74u1

Score
10/10
agentteslazgratkeyloggerratspywarestealertrojan

Malware Config

Targets

    • Target

      d231a87455e3c229a2c1ef27dfd65f76858c73c07f6a214fcb157e96ec279856

    • Size

      1.3MB

    • MD5

      2d50f018d166d7542d36f50de2531b15

    • SHA1

      3983a84e1e326253cc3bda99b03c3e4df25d9eca

    • SHA256

      d231a87455e3c229a2c1ef27dfd65f76858c73c07f6a214fcb157e96ec279856

    • SHA512

      bd48a25ac512c0aefe39a94a6dcafbac7d1b2cf31d66cf002a578a9101ce6e1be2c728fb55c553f47fddb042ff5b66d6aa1ace0a8427217a558d012c6548b2ee

    • SSDEEP

      24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaGWLJxzB2wzyaGHuMOnSw35:gh+ZkldoPK8YaDLIwz74u1

    Score
    10/10
    agentteslazgratkeyloggerratspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks