Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ead6d4d902...3d.exe

windows7-x64

10

ead6d4d902...3d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ead6d4d902561f1b65e3c1ad81240e2519744aebeea0d593244608104c81853d

  • Size

    1.4MB

  • Sample

    250109-bn3pestrdp

  • MD5

    e32604f86477352dbbee153a1908a2bb

  • SHA1

    45cbe021372407a7312e1c2badc49e91a2303a24

  • SHA256

    ead6d4d902561f1b65e3c1ad81240e2519744aebeea0d593244608104c81853d

  • SHA512

    03e874fab97a2020e060e41c8f0f23ba65da595c2406a78145b357d68c8a74e46e7b59bd8888dcf8e5bfd2670b88a754edd443dc8fddaaf2bbbe0780a3e809ec

  • SSDEEP

    24576:miQwFd9DQDgObuMJgSh9a+v1RIAhjLoamMiX4lNmZg0YxegPbUIDPP:miQ07+DbLglujLoyEkmZ9Y14

Score
10/10
agenttesladiscoverykeyloggerspywarestealertrojan

Malware Config

Extracted

Family

agenttesla

Credentials

Targets

    • Target

      ead6d4d902561f1b65e3c1ad81240e2519744aebeea0d593244608104c81853d

    • Size

      1.4MB

    • MD5

      e32604f86477352dbbee153a1908a2bb

    • SHA1

      45cbe021372407a7312e1c2badc49e91a2303a24

    • SHA256

      ead6d4d902561f1b65e3c1ad81240e2519744aebeea0d593244608104c81853d

    • SHA512

      03e874fab97a2020e060e41c8f0f23ba65da595c2406a78145b357d68c8a74e46e7b59bd8888dcf8e5bfd2670b88a754edd443dc8fddaaf2bbbe0780a3e809ec

    • SSDEEP

      24576:miQwFd9DQDgObuMJgSh9a+v1RIAhjLoamMiX4lNmZg0YxegPbUIDPP:miQ07+DbLglujLoyEkmZ9Y14

    Score
    10/10
    agenttesladiscoverykeyloggerspywarestealertrojan

    • AgentTesla

      Agent Tesla is a remote access tool (RAT) written in visual basic.

      keyloggertrojanstealerspywareagenttesla

    • Agenttesla family

      agenttesla

    • AgentTesla payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks