Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

4404-174-0...ry.exe

windows7-x64

10

4404-174-0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4404-174-0x0000000000400000-0x0000000000422000-memory.dmp

  • Size

    136KB

  • Sample

    230306-k4j2paah4x

  • MD5

    2dc19f3fa4ee28fec3ec33684d4e7063

  • SHA1

    fd98918f8a26b73424459aab9cc4f83401a0e325

  • SHA256

    644f959d3c5ef1bea63eadb769d87a773ad66f41a9b27ffa42ae7847ca43e149

  • SHA512

    7d61690877cc6535f38e5900631488cd879ccbdc7cc2fbe817fef076bb416590c898d196eeaceef952669faa146203b25853609607417767c34881b315886356

  • SSDEEP

    1536:7M/w/Zws3kTnvzbhNBPmxue2SRQg0dkEwiqoVioZkcOqJ40eZgYAv:7M0ZTkLfhjFSiO3o3kcqZZG

Score
10/10
blustealerstormkittycollectionstealer

Malware Config

Extracted

Family

blustealer

C2

https://api.telegram.org/bot5369570306:AAGakouymXOc8dp0WUuP_KaS81h9taRj_pk/sendMessage?chat_id=1884866272

Targets

    • Target

      4404-174-0x0000000000400000-0x0000000000422000-memory.dmp

    • Size

      136KB

    • MD5

      2dc19f3fa4ee28fec3ec33684d4e7063

    • SHA1

      fd98918f8a26b73424459aab9cc4f83401a0e325

    • SHA256

      644f959d3c5ef1bea63eadb769d87a773ad66f41a9b27ffa42ae7847ca43e149

    • SHA512

      7d61690877cc6535f38e5900631488cd879ccbdc7cc2fbe817fef076bb416590c898d196eeaceef952669faa146203b25853609607417767c34881b315886356

    • SSDEEP

      1536:7M/w/Zws3kTnvzbhNBPmxue2SRQg0dkEwiqoVioZkcOqJ40eZgYAv:7M0ZTkLfhjFSiO3o3kcqZZG

    Score
    10/10
    stormkittycollectionstealer

    • StormKitty

      StormKitty is an open source info stealer written in C#.

      stealerstormkitty

    • StormKitty payload

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.