Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
Redwolf.Crypter.exe
-
Size
2.7MB
-
Sample
240901-yl2qns1bna
-
MD5
05e029861eabed701354fb9be1531758
-
SHA1
c5c6a2a5aa45222b089cf7d49e6868b123dec237
-
SHA256
47186ae4cf99e391580f17ea6549fc05c6a4839f7ce1d2ec7c60f52d0438ba05
-
SHA512
fb6e5beff29b7d9a3400fe4c8caa79affd88dddf878378bb70f54bcc3a8237f6097ae21cb857a674da919b8706aecab1d625a319ec79ceb53dca27aaeb8f74c6
-
SSDEEP
49152:MA60A6FIm7P/Go4SkGMITYbNbNWo4kSH3OqtwIjkqXfd+/9AqAanV:aSFhP/GogGMIT4bNJFY3OqtXkqXf0FPb
Static task
static1
Malware Config
Targets
-
-
Target
Redwolf.Crypter.exe
-
Size
2.7MB
-
MD5
05e029861eabed701354fb9be1531758
-
SHA1
c5c6a2a5aa45222b089cf7d49e6868b123dec237
-
SHA256
47186ae4cf99e391580f17ea6549fc05c6a4839f7ce1d2ec7c60f52d0438ba05
-
SHA512
fb6e5beff29b7d9a3400fe4c8caa79affd88dddf878378bb70f54bcc3a8237f6097ae21cb857a674da919b8706aecab1d625a319ec79ceb53dca27aaeb8f74c6
-
SSDEEP
49152:MA60A6FIm7P/Go4SkGMITYbNbNWo4kSH3OqtwIjkqXfd+/9AqAanV:aSFhP/GogGMIT4bNJFY3OqtXkqXf0FPb
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
AgentTesla payload
-
Drops file in Drivers directory
-