Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ug.exe

windows7-x64

10

ug.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FREEE PANEL.RAR

  • Size

    3.3MB

  • Sample

    240824-nzrgrazgpq

  • MD5

    52cd8f1515900511f24409f6ddf8ea88

  • SHA1

    25b4f48fb4e7a993163e596daae6d37a74d4e043

  • SHA256

    8098f6588915f482b707639a66c3fbe98ff0edd04579c86d7d4205105efaa238

  • SHA512

    f2e45d9f889f6b30722c4e948fb4ea36a08c1f9f40ce1efe8053d30e36b000edf58278f52bd2a23aa9fcb4d797894605a7de033234b55f0ea057af38611966f1

  • SSDEEP

    98304:qpCaqFDM85lCQGqKpAbSsd6hOF515NDjflSu/4YEMjQ:qeFDMsCT6bSsd64F51fDrh/4gQ

Score
10/10
agenttesladiscoverykeyloggerspywarestealertrojan

Malware Config

Targets

    • Target

      ug.exe

    • Size

      3.5MB

    • MD5

      c02f0310508709cb3a7f7e414cc98115

    • SHA1

      799ca2eadb0f5aab0c3a68f8ed260988c193d23f

    • SHA256

      675f36891fedbe18f4a551818d762790a17138d9c2ac57f4bb2ff45abc146507

    • SHA512

      f951df3b93cb6007fb927c345bf33e5487279bf1dca795f5e798fe9c580a67431cf817c564b7152d1f545a327a43466ce10725ddafe60ac672ab31a4ae142cbc

    • SSDEEP

      98304:IaIVmRrKA+NrLOgq1oVIC8ykQEg+bYTWwXptBv4EPk7X1Qz:1IYR4Kgq1eR8SKwZXvBPeaz

    Score
    10/10
    agenttesladiscoverykeyloggerspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • AgentTesla payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks