Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
ss.exe
-
Size
1.1MB
-
Sample
240620-bnj73svfkq
-
MD5
5693d8863209b5498ff1a61caebfa9ba
-
SHA1
abd83adb9fc5495034accb251a4b1e04f47e1b3d
-
SHA256
ba38ba94dc7746ab451cb686df8d8f4cec03db581ae095c5e1b959134db30daa
-
SHA512
efbb0d585641cd85e71ef5fe08be05accd343b636deed64c2fca5075aafbada439f511fe1a4bea22c3f43f4e9c10ea273abfb9103c6c4f0dd8a50284b6b78c82
-
SSDEEP
24576:eAHnh+eWsN3skA4RV1Hom2KXMmHa3W9G2Qu2HUI+VV+BKI5:Jh+ZkldoPK8Ya3WTKHUI3N
Static task
static1
Behavioral task
behavioral1
Sample
ss.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
ss.exe
Resource
win10v2004-20240611-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.pgsu.co.id - Port:
587 - Username:
[email protected] - Password:
Vecls16@Vezs - Email To:
[email protected]
Targets
-
-
Target
ss.exe
-
Size
1.1MB
-
MD5
5693d8863209b5498ff1a61caebfa9ba
-
SHA1
abd83adb9fc5495034accb251a4b1e04f47e1b3d
-
SHA256
ba38ba94dc7746ab451cb686df8d8f4cec03db581ae095c5e1b959134db30daa
-
SHA512
efbb0d585641cd85e71ef5fe08be05accd343b636deed64c2fca5075aafbada439f511fe1a4bea22c3f43f4e9c10ea273abfb9103c6c4f0dd8a50284b6b78c82
-
SSDEEP
24576:eAHnh+eWsN3skA4RV1Hom2KXMmHa3W9G2Qu2HUI+VV+BKI5:Jh+ZkldoPK8Ya3WTKHUI3N
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-