Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    13d1288f5f5dadc4d49dff4d49892b99.exe

  • Size

    236KB

  • Sample

    230419-vf9bsacb47

  • MD5

    13d1288f5f5dadc4d49dff4d49892b99

  • SHA1

    e8fc4fb65025490a156bfc0b955b38ec164895cc

  • SHA256

    b2aca143071281b281d2d8c9898dfd8bae8b1951b5687429b6898d0206dc3294

  • SHA512

    7c4041021df3b0cf8cf768ed6bc5ce7bcf551df8501d1ce51aaeed3937faf80f311bfb8ce98a33bcbee3197ef0760762ea92311fd879dc668bb993494eee8c16

  • SSDEEP

    3072:1Jxw83fKXce8NNt9Gz9VF2Cxocnibrz4qrxHKzrjyzh5fJ9o3e1eAwYPDpJKJRfC:Fw8g+/G4AUIqMjyzbJ9o3e1eVYPDWJ4

Malware Config

Targets

    • Target

      13d1288f5f5dadc4d49dff4d49892b99.exe

    • Size

      236KB

    • MD5

      13d1288f5f5dadc4d49dff4d49892b99

    • SHA1

      e8fc4fb65025490a156bfc0b955b38ec164895cc

    • SHA256

      b2aca143071281b281d2d8c9898dfd8bae8b1951b5687429b6898d0206dc3294

    • SHA512

      7c4041021df3b0cf8cf768ed6bc5ce7bcf551df8501d1ce51aaeed3937faf80f311bfb8ce98a33bcbee3197ef0760762ea92311fd879dc668bb993494eee8c16

    • SSDEEP

      3072:1Jxw83fKXce8NNt9Gz9VF2Cxocnibrz4qrxHKzrjyzh5fJ9o3e1eAwYPDpJKJRfC:Fw8g+/G4AUIqMjyzbJ9o3e1eVYPDWJ4

    • Detects Stealc stealer

    • Stealc

      Stealc is an infostealer written in C++.

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks