Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    EXA.rar

  • Size

    774KB

  • MD5

    2e76f9e3b7fe9b6815a9400edcd9c05d

  • SHA1

    c57e856ce0b6d5869b1a2850eba21cd867a831f8

  • SHA256

    b2281251cc0c81ad653f1888118d0a6a2a938da99a397ff8942690d901c25060

  • SHA512

    cb48533c28df6ba1c92a1c4f802a663c5be3b928a69eef2d1ca523fd534cc7aea16fe268bf4f03ad7a34d3e8dda1fb54938db34e1049cf19fd5c87059c2f9c38

  • SSDEEP

    24576:9Ul8+naChvnqJZQi+L44Kha4FksGWzvcx:ql5naCNnCZ2kmsGWzE

Score
10/10

Malware Config

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • EXA.rar
    .rar

    Password: 123

  • EXA/Creative EAX Settings.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • EXA/Creative EAX Settings.exe.config
  • EXA/Creative EAX Settings.pdb
  • EXA/EAX Console.exe
    .exe windows:4 windows x86 arch:x86

    Password: 123

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • EXA/EAX Console.pdb
  • EXA/Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    Password: 123

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections