Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

5

Orden de C...57.exe

windows7-x64

10

Orden de C...57.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18102024_0012_17102024_Orden de Compra No. 434565344657.uu

  • Size

    788KB

  • Sample

    241018-ahlchsxekn

  • MD5

    bcf95859bdf6d81a9150630388313979

  • SHA1

    629eea012ae2e6f594ec76c8669a3a0e5c260e7c

  • SHA256

    74b85049999d97634b4ea8744b34899cacd90fcbdafd4a04095f2a1cf2b79348

  • SHA512

    e1a0d207c4ba18b381778018e7fce44455e4470daf14d09005aca8fb04e2e013625b447249ad1727f34ac15f5110c63e65781d7bc59767a56fb6807a95dbc4e2

  • SSDEEP

    24576:xQE7NFqah7Sn8bNWDUlt2vQqIH2x+s2D33K/:VNFFe/VoqI7a

Score
10/10
agenttesladiscoverykeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

  • Protocol:     ftp
  • Host:
    ftp://ftp.elquijotebanquetes.com
  • Port:
    21
  • Username:
    [email protected]
  • Password:
    -GN,s*KH{VEhPmo)+f

Targets

    • Target

      Orden de Compra No. 434565344657.exe

    • Size

      1.1MB

    • MD5

      0ca80bc9b45045d605a9626fc23da05b

    • SHA1

      5eb14f28eb9f4527ed4e246bd78c211d4e6cdaff

    • SHA256

      074faad72222e678cb88991bb9fd69466ee21edc3d29f1d3636c09db0f632f20

    • SHA512

      aff4fc282bbbb7bd56281b0894a998e9a3d26275637987531bc29d46e55838903b75aa50899042c1fc39a42d07c90eedad96aba3b15c4c49160c4582b7236eae

    • SSDEEP

      24576:ffmMv6Ckr7Mny5QLXZM3FeM5uAeGkNmlG4Z7HYjwGcsIprK:f3v+7/5QLXZGBgAeGRfl6z0Y

    Score
    10/10
    agenttesladiscoverykeyloggerspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks