Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
4f349440939cdc8d0514589caa8b0230d8af7f53f98400fee3f9ea46b8b2dd15
-
Size
424KB
-
Sample
241125-bntrhszpgz
-
MD5
e03e6b0ba81fed33aa83106ff017bfda
-
SHA1
5d53fa7adb672d5b30202d728acabcd55543df4e
-
SHA256
4f349440939cdc8d0514589caa8b0230d8af7f53f98400fee3f9ea46b8b2dd15
-
SHA512
614eb49d3bb5e915cc435450e0ee710f33500162d4e47a06615b188afd1ec85efee53e7d3b71fcdc7d74e4c4ada17b87a36c244e17023df927e15b36f771fc17
-
SSDEEP
12288:wAqd/sEDAxcVDn0ahGGWjiha3okRh+W0ej6usQcT:wA6/NnBIga4kR8xeeutA
Static task
static1
Behavioral task
behavioral1
Sample
4f349440939cdc8d0514589caa8b0230d8af7f53f98400fee3f9ea46b8b2dd15.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4f349440939cdc8d0514589caa8b0230d8af7f53f98400fee3f9ea46b8b2dd15.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
mail.croatiahunt.com - Port:
587 - Username:
[email protected] - Password:
VilaVrgade852 - Email To:
[email protected]
Targets
-
-
Target
4f349440939cdc8d0514589caa8b0230d8af7f53f98400fee3f9ea46b8b2dd15
-
Size
424KB
-
MD5
e03e6b0ba81fed33aa83106ff017bfda
-
SHA1
5d53fa7adb672d5b30202d728acabcd55543df4e
-
SHA256
4f349440939cdc8d0514589caa8b0230d8af7f53f98400fee3f9ea46b8b2dd15
-
SHA512
614eb49d3bb5e915cc435450e0ee710f33500162d4e47a06615b188afd1ec85efee53e7d3b71fcdc7d74e4c4ada17b87a36c244e17023df927e15b36f771fc17
-
SSDEEP
12288:wAqd/sEDAxcVDn0ahGGWjiha3okRh+W0ej6usQcT:wA6/NnBIga4kR8xeeutA
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Agenttesla family
-
AgentTesla payload
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext
-