Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d14936ae68c36b0cc4d2e01d4f97000ee9f41d53.jar.tar.gz
-
Size
626KB
-
Sample
240513-mfkdnabb64
-
MD5
f1082222fd2fa6c521697db6494ec386
-
SHA1
085afe02bec4193f368cee9c0ec761f566ac2dc4
-
SHA256
f58f754847fb4904f6fd0617f8d3c059e227be666421dbffbb56831e50ba8f31
-
SHA512
b01a9418f895b7852af10c2ebdab6b10e5a1e187e42191008f9dd410b87d8f5fe80e07b61360001464d0b87aecbef3d08fa8c995b1b7c051ead2829c1776ddec
-
SSDEEP
12288:JhbnSpH+ELG09tQCJA88vTrbU9+gF30Pj/2WuHsfyG7dIiPRHK8lSN:Pk+ELG0nQhvTrbU9+oW/2WuMf9xIQRXa
Static task
static1
Behavioral task
behavioral1
Sample
Shipping Docments MVP 40FT 10X100 REF0003424.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Shipping Docments MVP 40FT 10X100 REF0003424.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
bezelety.top - Port:
587 - Username:
[email protected] - Password:
IxF(..bSed6k - Email To:
[email protected]
Targets
-
-
Target
Shipping Docments MVP 40FT 10X100 REF0003424.exe
-
Size
1.1MB
-
MD5
76891a8bc9b9a15318dcbeaf8b6c2ccb
-
SHA1
2d81ef1cc22696c01a95f58408e41562a0290a8c
-
SHA256
2d63885c46bf75ac671bc3849d2b29b604cad3584ff72ef4ed10bb75ee606234
-
SHA512
0849fabc0a0277f99ca737dbcbf8ac1689cdd31d84a8b6caf8945c76a6eb72c9678962d88b0adce8dba75ae810e410db0a23d2466a4f8c6775693a01c88b16b1
-
SSDEEP
24576:0AHnh+eWsN3skA4RV1Hom2KXMmHaa3AUJN3cHwPzJTbR+tH5:Dh+ZkldoPK8Yaa3AIcaJTbQb
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-