Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

7d00226410...2f.exe

windows7-x64

10

7d00226410...2f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d0022641077d1e09cb1b520ef3e416243783eb1c5b6b65c5aeb520ac2030c2f.exe

  • Size

    1.2MB

  • Sample

    240620-j43y5a1hqr

  • MD5

    f2205f8cbce1fd423e5146d1f21785e1

  • SHA1

    697261a2cd7e4b131b49caaa40801e202a573b99

  • SHA256

    7d0022641077d1e09cb1b520ef3e416243783eb1c5b6b65c5aeb520ac2030c2f

  • SHA512

    c44359ba9a082ece25ba6b23d0c2fc7a5e662f08159d793e9ae745a7160452d6ed07b8de7c8c9cb4a7db8a9981bf724deff86f724bb8c054e71d3f1afdf6b58e

  • SSDEEP

    24576:wAHnh+eWsN3skA4RV1Hom2KXMmHahQhdMbtbIrZnieLqs/5:nh+ZkldoPK8YahQDMxb2nUQ

Score
10/10
agentteslakeyloggerspywarestealertrojan

Malware Config

Targets

    • Target

      7d0022641077d1e09cb1b520ef3e416243783eb1c5b6b65c5aeb520ac2030c2f.exe

    • Size

      1.2MB

    • MD5

      f2205f8cbce1fd423e5146d1f21785e1

    • SHA1

      697261a2cd7e4b131b49caaa40801e202a573b99

    • SHA256

      7d0022641077d1e09cb1b520ef3e416243783eb1c5b6b65c5aeb520ac2030c2f

    • SHA512

      c44359ba9a082ece25ba6b23d0c2fc7a5e662f08159d793e9ae745a7160452d6ed07b8de7c8c9cb4a7db8a9981bf724deff86f724bb8c054e71d3f1afdf6b58e

    • SSDEEP

      24576:wAHnh+eWsN3skA4RV1Hom2KXMmHahQhdMbtbIrZnieLqs/5:nh+ZkldoPK8YahQDMxb2nUQ

    Score
    10/10
    agentteslakeyloggerspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks