Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2480-16-0x...ry.exe

windows7-x64

2480-16-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2480-16-0x0000000000400000-0x0000000000442000-memory.dmp

  • Size

    264KB

  • Sample

    240311-q8gd9agd94

  • MD5

    1d75b93ad105d79108eeee06a68c496d

  • SHA1

    eec3451ba6d0e0a9240a986786c57d1bf1c3b03f

  • SHA256

    813a15dc515f2d21f7080148cf15d5575d919af98bfadd77d092a34e86029bd7

  • SHA512

    712973bd97ab7d69b895aeca81b874460187d2ee371bdb29f7c93e98796ea2bd9de729b1ec9d7aa5fa40509153f1012c039fec0243158d99d2f5221f38ba6570

  • SSDEEP

    3072:JWSdh95txdHz9D0DN6Mm3UDABss/BS9lFQg5rCnkeMW+:wSdh95txdHzV0DN6MmEURY9lFQ7nO

Score
10/10
agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://valvulasthermovalve.cl
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    leosoftking1

Targets

    • Target

      2480-16-0x0000000000400000-0x0000000000442000-memory.dmp

    • Size

      264KB

    • MD5

      1d75b93ad105d79108eeee06a68c496d

    • SHA1

      eec3451ba6d0e0a9240a986786c57d1bf1c3b03f

    • SHA256

      813a15dc515f2d21f7080148cf15d5575d919af98bfadd77d092a34e86029bd7

    • SHA512

      712973bd97ab7d69b895aeca81b874460187d2ee371bdb29f7c93e98796ea2bd9de729b1ec9d7aa5fa40509153f1012c039fec0243158d99d2f5221f38ba6570

    • SSDEEP

      3072:JWSdh95txdHz9D0DN6Mm3UDABss/BS9lFQg5rCnkeMW+:wSdh95txdHzV0DN6MmEURY9lFQ7nO

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks