Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
91d32b713114fac7d89f9b5f6fdadc3e6d6c00f61d2c6f3ae31ba22af9583441
-
Size
597KB
-
Sample
241218-bgrnkswjgx
-
MD5
f3e4c5fc67a827967e7a4715e7c9a727
-
SHA1
14e4c253f4f111e0f54e2d0bea6f44faa1324e18
-
SHA256
91d32b713114fac7d89f9b5f6fdadc3e6d6c00f61d2c6f3ae31ba22af9583441
-
SHA512
ae74e48f4eb33615b93ddc86944582052033731a17a9556c5449f2a0f2183e0f0c16c7ba6386d566d63730b6367050873be4a0395deb484e387bee5f7ac4e5cc
-
SSDEEP
12288:IkowKaSE/I5tIXr7kxe7wI4Jh+g7kugNZSWGvjb9GCPvYK3T19Gsu+:I1SSN6koJQwgYzrStvdvfjG9+
Static task
static1
Behavioral task
behavioral1
Sample
doc02417120024.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
doc02417120024.exe
-
Size
950KB
-
MD5
bd28f9a835c67ce45b3a3ca02f6737a2
-
SHA1
16dc478690c24f29b52186f0ed8c152007fdbaeb
-
SHA256
2f089d43e47839f07590fc97fbd2bbe91f08ff02d50b3a6b7fe68f3e1a81026d
-
SHA512
c811d48001aade05a917e89770277a0af0a5f10639c1dd63c66d99728650c877d74f843ab4c9f57847f1654fe7240606072c51383a90811ec6aeb62ee91e2290
-
SSDEEP
12288:ehkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcE4aCBWGvAbhGCPvkK3X1rGs2:uRmJkcoQricOIQxiZY1iaCBtvgvLdG9J
-
AgentTesla
Agent Tesla is a remote access tool (RAT) written in visual basic.
-
Agenttesla family
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext
-