Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

1

cstealer-main.zip

windows7-x64

1

cstealer-main.zip

windows10-2004-x64

1

cstealer-main/LICENSE

windows7-x64

1

cstealer-main/LICENSE

windows10-2004-x64

1

cstealer-m...DME.md

windows7-x64

3

cstealer-m...DME.md

windows10-2004-x64

3

cstealer-m...der.py

windows7-x64

3

cstealer-m...der.py

windows10-2004-x64

3

cstealer-m...s1.png

windows7-x64

3

cstealer-m...s1.png

windows10-2004-x64

3

cstealer-m...s2.png

windows7-x64

3

cstealer-m...s2.png

windows10-2004-x64

3

cstealer-m...s3.png

windows7-x64

3

cstealer-m...s3.png

windows10-2004-x64

3

cstealer-m...s4.png

windows7-x64

3

cstealer-m...s4.png

windows10-2004-x64

3

cstealer-m...ll.bat

windows7-x64

1

cstealer-m...ll.bat

windows10-2004-x64

1

cstealer-main/main.py

windows7-x64

3

cstealer-main/main.py

windows10-2004-x64

3

cstealer-m...ts.txt

windows7-x64

1

cstealer-m...ts.txt

windows10-2004-x64

1

cstealer-m...rt.bat

windows7-x64

1

cstealer-m...rt.bat

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cstealer-main.zip

  • Size

    274KB

  • Sample

    230627-qxpw9afb2z

  • MD5

    667856148348ce8f7ca144d328e97a5a

  • SHA1

    3b35be4a8d4b22528bc489c2026c5d1c1613f752

  • SHA256

    c63eeb3e872b93ebce0ff49a3524133dc099017763c73dfe3779ee031f525053

  • SHA512

    f25828f0c968f37a0c6e894fb0fbdcbf07255b94bd8c80f5c869c9a0ffbb8f328406a7214ced7f7bdaed58269259cb75aedab0eaa2ca8ba4f70477232321545d

  • SSDEEP

    6144:YK5pgyXcEWA66T423Ynx86ZAxI+1hKOVCnc66aMhX82BStisi:xjVFD423426ZA+w09mx9Bwi

Score
3/10

Malware Config

Targets

    • Target

      cstealer-main.zip

    • Size

      274KB

    • MD5

      667856148348ce8f7ca144d328e97a5a

    • SHA1

      3b35be4a8d4b22528bc489c2026c5d1c1613f752

    • SHA256

      c63eeb3e872b93ebce0ff49a3524133dc099017763c73dfe3779ee031f525053

    • SHA512

      f25828f0c968f37a0c6e894fb0fbdcbf07255b94bd8c80f5c869c9a0ffbb8f328406a7214ced7f7bdaed58269259cb75aedab0eaa2ca8ba4f70477232321545d

    • SSDEEP

      6144:YK5pgyXcEWA66T423Ynx86ZAxI+1hKOVCnc66aMhX82BStisi:xjVFD423426ZA+w09mx9Bwi

    Score
    1/10
    behavioral1behavioral2

    • Target

      cstealer-main/LICENSE

    • Size

      6KB

    • MD5

      65d3616852dbf7b1a6d4b53b00626032

    • SHA1

      82da472f6d00dc5f0a651f33ebb320aa9c7b08d0

    • SHA256

      a2010f343487d3f7618affe54f789f5487602331c0a8d03f49e9a7c547cf0499

    • SHA512

      1eb4436f8d58766cbe99db97e5e8c0db8a706376afd291c337de1ba7a6b066d3791dc85ad034bdd54ea336bed6e6e8e7a037d8b04b2773c9c7517b9d9921d1fa

    • SSDEEP

      192:uk5MToKgfbxcjtv2sFtYH1Y1mzLKRL0WWJ:DAvg1cjT4ImKJ0t

    Score
    1/10
    behavioral3behavioral4

    • Target

      cstealer-main/README.md

    • Size

      5KB

    • MD5

      4c3d65af4c3a541b8260bdbcfb2e4246

    • SHA1

      6b6df676fd2add7d0fa0ce4b04ef07c275bad687

    • SHA256

      62e47e1c0a289846bdc1f907c4fd74963d2ec655d3002eeb71f58a26d8568bea

    • SHA512

      8f4188b7ece197663f7bd148e03b94746bb1b202e7555fa2ccf3b65a0f172be024c5ee83f56a7efbdd19bbf10efc04c117260bf4b03d11b54ca06ee4ad2d671d

    • SSDEEP

      96:UIL6rU6RImEUttIGI21IHVAH7ndJFK5RSQgbWI4WIbWIBQWI4JE+BWm7GwUhgZ:UXrUED17wVAH7vMMna9jQAxqM

    Score
    3/10
    behavioral5behavioral6

    • Target

      cstealer-main/builder.py

    • Size

      5KB

    • MD5

      9ebd98f577d60b13f01c942db38332c8

    • SHA1

      e99ac33ed1a47bad424d9ffd58c2dc5b012e122a

    • SHA256

      3fa48b3dd6c7d05d800377676e819144441ea01ef206ee83c66dfb2a869eee17

    • SHA512

      382de898e96f43ba05e5658915883f0af0eb7eabdb0c53a253ac9d29d8826c3c6012d7ead97faf1f65b726196a158c9074a0d73400bb455a420095fca6fb915e

    • SSDEEP

      96:XqxFkY94CuOyIs/CMwBh4IO3kY94CuOyIs/CMwBh8IIZfY7DGZ2oEyI4GpYt3b:IFkY94CuOyIs/CMwBhu3kY94CuOyIs/r

    Score
    3/10
    behavioral7behavioral8

    • Target

      cstealer-main/img/ss1.png

    • Size

      106KB

    • MD5

      2b385f2df0527914a1fbc4c2125afb7e

    • SHA1

      d2abe585325db1da10413da731f8a9f8cd9562ca

    • SHA256

      0ce2f309f8a050e412d1293a9d06194331202e0aeac3905f0344b51c61cc028b

    • SHA512

      63b9607e6ea5aa3d4e5c36d3ee9b9e17dcd3662e8674ff560f705ccc66203ebb6e2b42269634db9b2186b5f5f3a94131a7edca64d041667c86d274f4661b8836

    • SSDEEP

      3072:7YaFPqgoM7Pc15S1D0y9ziI5uiGvFm8lH4UvAW:hF7fPRGYk3

    Score
    3/10
    behavioral10behavioral9

    • Target

      cstealer-main/img/ss2.png

    • Size

      75KB

    • MD5

      1c57a3181cb132510a8f4a4f0a8215e9

    • SHA1

      6f1a3308baf89076ad485852124a5f33fd8aead2

    • SHA256

      a0fed4b37975d44eb1a5d05bb195723d4abc87aab0677085c87d83de4507f726

    • SHA512

      07dfe3152a9bc3c8169b9a750e7f6317f7cff7becc3eb9234204d1c72643708a6bd54490c6ec96d65bcfb8c46c986a9f424cb88d62eca649cd9897d945c9c9d0

    • SSDEEP

      1536:DWcGhQEtXM5h+LnvSy1ncYZ5Ustag/KjgiCaj9W9HJYxAL0+vpya:pGZZKh4n/nr5U8DsgFOEz

    Score
    3/10
    behavioral11behavioral12

    • Target

      cstealer-main/img/ss3.png

    • Size

      73KB

    • MD5

      b66069e5439fff208ac980d6a459c0ff

    • SHA1

      c43e9b3ae6907370172af99115c3e98e2a4e9dbd

    • SHA256

      26a2bd36cfe5ecc4b9e5cbe6ca15fca382c4c688791d98c8533cce85ccf9f228

    • SHA512

      9e3b534f65d42f7b220054ea6aefdfe5a9a514c209d0b4f41bd0a6683c6c8421c485f1c37d73848517510550ecf034cdc408eb4362a6fe3aca093b18ccc81fab

    • SSDEEP

      1536:KeUynvxz/vzTMhTfNHZsKsSyC2f+h9KHaTLkQs9Jg1vdOdtKvdTelf:KES1hZXWk+HaPkQCJg1vkdtKSf

    Score
    3/10
    behavioral13behavioral14

    • Target

      cstealer-main/img/ss4.png

    • Size

      32KB

    • MD5

      36fe0d1305dee57432499b9357767381

    • SHA1

      35442726fad482b846e3428516d76a22841b9447

    • SHA256

      9b30de17e51867a4f1797fbb84a7ba14d4207cc60a4288d91410f73614a5350b

    • SHA512

      83fc305111204d7b78d5ca679f599c4fe54e0b0e2f053aacee5763a0ef3a15b619833ea2f98c0844fecc1be056340c905083798d6376912eacd58c939649171f

    • SSDEEP

      768:3J3ulxPn6kjdOLSvYseci6k8k41PXEjClNledR6:wx/6kjdOLSgZclk8kWUjCf0m

    Score
    3/10
    behavioral15behavioral16

    • Target

      cstealer-main/install.bat

    • Size

      49B

    • MD5

      ebeaccf4443e852caac1dd62952d3c43

    • SHA1

      02ce957a5144a3dfd1558cb71183b437f6ae37c8

    • SHA256

      ebda70b1032e47f5e35e1de47d993d8d8e0d3718e6d4f345ce6432f6dcffb705

    • SHA512

      34324a97ceb9dd7ac46a4906ae049fbd225ed904bcd85dc0b029ff6e66353d07e41d019c2a8139205a35b492c3f2aee8f674c14019b7006a9672f8bd6d072a49

    Score
    1/10
    behavioral17behavioral18

    • Target

      cstealer-main/main.py

    • Size

      46KB

    • MD5

      3c84bff4276af2c8fbf3597a189a16dc

    • SHA1

      4a288f6a26fe2bf1868d9078d507befec0c59a0a

    • SHA256

      887628281e4d4af297796303bb16b7c92dbba127cfd25ee995735cd661ff93b3

    • SHA512

      aa99b0b3b8dcb4104f2046b6e477d0bbb2014cd1f5710eb05ff7cc9dbcf2f604bb674cd1a23557c6abe6a304d679e796149e2065d8dbd72055b61042d3225274

    • SSDEEP

      768:vDajxPvv3PZmsyhTuVJ7TyN2uL12oqQufQtRPPWMCDE:7ajxPvv3PjyhCV1C2aRbufK8Mf

    Score
    3/10
    behavioral19behavioral20

    • Target

      cstealer-main/requirements.txt

    • Size

      96B

    • MD5

      f3952a618e368edb0200ac9e3ad58924

    • SHA1

      403ac51d87587b6d43a7cb07785e6f2510d2ed6b

    • SHA256

      a713998fea2d2ef7a70a9c1a864add8b78e08e2224f6dc9174823bcfe6cc5429

    • SHA512

      c6e3111e3c8451f155ec332122f936bf84e0d004d25941330a41354993ef55481efa082407db6f7b758dbaa3bb26c89fe6f71a545a7e210992ea7a4e185f87a3

    Score
    1/10
    behavioral21behavioral22

    • Target

      cstealer-main/start.bat

    • Size

      35B

    • MD5

      e20d4392cbac1ef4c73f93c6e4a828b1

    • SHA1

      5e28e0f4967f35c7bf1942813265499f2c329e09

    • SHA256

      03aac700e872f2a2a05f79990504f7eb39950ccfd539e818e8586ebb7ef55158

    • SHA512

      7af88983c9aabee84f7154724cf95b47a9c39eb8cde91795b56e5bb5d90be6c256358f871bf98b3976b205107c420b09d44758f2640d96e125aaef8ee85d671d

    Score
    1/10
    behavioral23behavioral24

MITRE ATT&CK Enterprise v6

Tasks