Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
937e65b13b92c4b71308476d56dbd566dd83226a649247eb925aca4a6da4732b
-
Size
693KB
-
Sample
241213-bmwvgstnfs
-
MD5
44700bb7529be2cf41201fd69a9231f7
-
SHA1
20732f69eb3c155c96434cddff47d4f9298e7694
-
SHA256
937e65b13b92c4b71308476d56dbd566dd83226a649247eb925aca4a6da4732b
-
SHA512
075184839ece940a9575f961190c965fcfbe54a68bf7a9f45f5f8b2199d5d5cf85b24cde07ea032326ec6532eb648c7ae04f4385978a1f9508c24cf8d14c9250
-
SSDEEP
12288:88kmIIX0UautsMxhmGQ96tlytR3eXK/eAAwNb19UFetRIODd5caqX/Axgpd:rprX0UautsMxgGi6tgv/eApb0FeTIOYL
Static task
static1
Behavioral task
behavioral1
Sample
Remittance 12 - 103.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Remittance 12 - 103.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
Remittance 12 - 103.exe
-
Size
1.1MB
-
MD5
eb825525a859ea9849df1e834b1ad616
-
SHA1
2ac5df9260b61026d830ee922d673454addf4874
-
SHA256
706a82f9a21ca0e5a2c87de18ce323764eeb489737c9c165f89ce4745b946053
-
SHA512
458782549f5a7ab96e87155afa642ee423fc09c07641d8d9409ccffcf6d7e5fb6213e6b3077cfb5bbef4f55eaf9f87b63bea226509f2a193b725e00e9470ee15
-
SSDEEP
24576:4u6J33O0c+JY5UZ+XC0kGso6FaAXUbzkhHVErGrWY:yu0c++OCvkGs9FaAEfkhyY
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Agenttesla family
-
Unsecured Credentials: Credentials In Files
Steal credentials from unsecured files.
-
Accesses Microsoft Outlook profiles
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-