Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
8794b0fb5f9ef4bc42b11be6bd4a59260b6209665ecc816e8c223c4a10e3a6b3
-
Size
717KB
-
Sample
241213-bg6gqstmaz
-
MD5
a60f178a653c07c83ec58dfd6d752fd7
-
SHA1
eb2b19fd8449c947be01a62142158833d1499fe6
-
SHA256
8794b0fb5f9ef4bc42b11be6bd4a59260b6209665ecc816e8c223c4a10e3a6b3
-
SHA512
512b63e8740457bde1ff90370fa91bedc5888d25195abf9fea532e02d5ed5af3cd6127ed36b7a15e1c00b263c1465c484ec9670a72c08481af3b846bf9d9306e
-
SSDEEP
12288:Q59OH2uQD+cwRLrrlSPlbr4aSHmJFOrGfyf0lp9xdBfq2hrS9N:APZuR7sPBLnJ+EycJnBffSD
Static task
static1
Behavioral task
behavioral1
Sample
RFQ- 81900004219004522200001093.exe
Resource
win7-20241010-en
Malware Config
Targets
-
-
Target
RFQ- 81900004219004522200001093.exe
-
Size
250.0MB
-
MD5
010c326d706e2e8b1de06baa22d1547e
-
SHA1
433e2579176cb037c06c090a3d79c9c65805381f
-
SHA256
3422607894a2556aadfbd968b01b6312d298d7639674871c5f468e9bdbc858f0
-
SHA512
e4179467341132b44f1286a2f78d66987e9bf9dbe40c4cf4feeb37e406b608453a47dcd079238d1d086e00b08b40283f187964c667578a4c14be8fbf449262e1
-
SSDEEP
24576:Nu6J33O0c+JY5UZ+XC0kGso6Fam/f2OySFnBfpjZcWY:/u0c++OCvkGs9Fam/f2OdFnF5lY
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Agenttesla family
-
Suspicious use of SetThreadContext
-