Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Best Price.exe
-
Size
811KB
-
Sample
240517-j8xmxahc2s
-
MD5
b353071dc5c2a19eddc322df0afd4555
-
SHA1
0982d0f41385ac54acde12e3e94e0826c6ceabb6
-
SHA256
901dc27ad8572ac676262b222f35e1144d1ec16148d8b49117ac118980f3d721
-
SHA512
d9bc455852af01720905ac489ab4fe188ef1d23649fb98a942f65cdc48c0c97d34cdd277f7b9ee6d5c6f5601eb422564c216b235bd2c8d2246b9cb8ceec1f01f
-
SSDEEP
24576:/bYzlzJSNI+2q0dGyelqr2Y3hrkTg3OMKw1Y:sldaInGvlqF3hY03R11Y
Static task
static1
Behavioral task
behavioral1
Sample
Best Price.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Best Price.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
us2.smtp.mailhostbox.com - Port:
587 - Username:
[email protected] - Password:
OetwSUilP3 - Email To:
[email protected]
Targets
-
-
Target
Best Price.exe
-
Size
811KB
-
MD5
b353071dc5c2a19eddc322df0afd4555
-
SHA1
0982d0f41385ac54acde12e3e94e0826c6ceabb6
-
SHA256
901dc27ad8572ac676262b222f35e1144d1ec16148d8b49117ac118980f3d721
-
SHA512
d9bc455852af01720905ac489ab4fe188ef1d23649fb98a942f65cdc48c0c97d34cdd277f7b9ee6d5c6f5601eb422564c216b235bd2c8d2246b9cb8ceec1f01f
-
SSDEEP
24576:/bYzlzJSNI+2q0dGyelqr2Y3hrkTg3OMKw1Y:sldaInGvlqF3hY03R11Y
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-