Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
04.exe
-
Size
1.0MB
-
Sample
240715-erx5wsxdlq
-
MD5
eee18f9c54e204779f58707a3af6f6d8
-
SHA1
af5cfc00b6a9bb72c37629fb5aeb46dfe788344a
-
SHA256
daa69f6b826aee3b3949e40f993f10a5f30faf0834985039cbfa21d20029f0a1
-
SHA512
6cb50f4f00923ea798c5e58d50f459d0f1756af77911dbe75b3c2304d927f7cce5c96050001f8947c0e366410fa72aebd4a94ef3ca0b523298ecd4ae091fa447
-
SSDEEP
24576:JAHnh+eWsN3skA4RV1Hom2KXMmHajFvcnt8J1y5:Qh+ZkldoPK8YajFvcB
Static task
static1
Behavioral task
behavioral1
Sample
04.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
04.exe
Resource
win10v2004-20240709-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.funworld.co.id - Port:
587 - Username:
[email protected] - Password:
fwp123mail - Email To:
[email protected]
Targets
-
-
Target
04.exe
-
Size
1.0MB
-
MD5
eee18f9c54e204779f58707a3af6f6d8
-
SHA1
af5cfc00b6a9bb72c37629fb5aeb46dfe788344a
-
SHA256
daa69f6b826aee3b3949e40f993f10a5f30faf0834985039cbfa21d20029f0a1
-
SHA512
6cb50f4f00923ea798c5e58d50f459d0f1756af77911dbe75b3c2304d927f7cce5c96050001f8947c0e366410fa72aebd4a94ef3ca0b523298ecd4ae091fa447
-
SSDEEP
24576:JAHnh+eWsN3skA4RV1Hom2KXMmHajFvcnt8J1y5:Qh+ZkldoPK8YajFvcB
Score10/10-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Suspicious use of SetThreadContext
-