Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
afe81319c38d7fb0c9061492315fd907.bin
-
Size
633KB
-
Sample
241213-btw4tstqdy
-
MD5
7cbacf61bd84e5e87dcf5f78e0a83c57
-
SHA1
8a276ac82b2a3bfc7ef5d294383b097653503dea
-
SHA256
c3db5f0bfa176f65b58057fc7c3fca4782b66890914c4f609db7c631da823fdf
-
SHA512
d96f575ebae2ae5d059cd8b28b909d90823d2b247b4d5ce56a2a5ba57c3395fea0f56cf1d4e14915d594ef395d603fee51fa0b7069b1dfe5d4c50f9f1b589b15
-
SSDEEP
12288:+D6ZCPfoV+Dl8L6/ETzS7wvXrUP3ys/XQBDyFm9Us+uaOZuloZ2JMuTL0a443pB:+D6Jf/6wvQPCsPQ0Fm9t+G8Gb+74oB
Static task
static1
Behavioral task
behavioral1
Sample
ebb0798162290ffb9a0e46b0ac35c719044bf93c62d90e056fdf9a41c3fc132d.exe
Resource
win7-20240903-en
Malware Config
Extracted
agenttesla
Protocol: smtp- Host:
zqamcx.com - Port:
587 - Username:
[email protected] - Password:
Anambraeast@2023 - Email To:
[email protected]
Targets
-
-
Target
ebb0798162290ffb9a0e46b0ac35c719044bf93c62d90e056fdf9a41c3fc132d.exe
-
Size
1.1MB
-
MD5
afe81319c38d7fb0c9061492315fd907
-
SHA1
294e3b75d8fc5bf8afddfa0f7518db11345236c6
-
SHA256
ebb0798162290ffb9a0e46b0ac35c719044bf93c62d90e056fdf9a41c3fc132d
-
SHA512
83a3ac8e7818fc60b506d2d4a1c59b91372d59f5499c7e4a601c13784fdee79ab25ae62162306b32dc125621252611096ea7b17b07998f1517f30f535e3c8c82
-
SSDEEP
24576:lu6J33O0c+JY5UZ+XC0kGso6FaiTmfult3gmWY:nu0c++OCvkGs9FaiTmfOt3gY
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Agenttesla family
-
Suspicious use of SetThreadContext
-