Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

427279a267...b9.exe

windows7-x64

1

427279a267...b9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    427279a267a65691961da1112b7c562ba7c707709b681c71a7194aa136066eb9.zip

  • Size

    1.3MB

  • Sample

    230805-z7mdjseg82

  • MD5

    bcb11592e88de6d2ff38ac6fe5cd5307

  • SHA1

    4de7e49ca21ad94ee9b4209baa9bbf475345525e

  • SHA256

    e1c7bbb8d2741efb4b5357b1b65d14821ae4436e57c0aafc34e3852fa6083129

  • SHA512

    dae65909164cde0a565472f65ec809b1980eb338f5766d3ad0f770ee0680e9bd2820dd97bea65fe887f5a705e602b6d0042bd24381003aa0d7fb06209274da86

  • SSDEEP

    24576:zE1wJIwIPMF0+vXBc4xgnROBv2Aluz87IQ7B5GCY0LsuwVOK:zz+wIUW+vxc4x8OwAl48sSB5e0Q1

Score
10/10
blustealerspywarestealer

Malware Config

Extracted

Family

blustealer

C2

https://api.telegram.org/bot5797428905:AAGaRRXGZN1d9GGFd3sE5x4uSpCGF0PU4m4/sendMessage?chat_id=1251788325

Targets

    • Target

      427279a267a65691961da1112b7c562ba7c707709b681c71a7194aa136066eb9.exe

    • Size

      1.4MB

    • MD5

      34aa0ca40863c30653a0b6ba10d3daa2

    • SHA1

      c5dbbc9a3f6d537ab49aeb89223810cd67c256f7

    • SHA256

      427279a267a65691961da1112b7c562ba7c707709b681c71a7194aa136066eb9

    • SHA512

      34e46909f3ea586033baa5f73ecbf1f5072f2d05cfaf77f6ab2535ee0798f01427b1e62719fc4026f4b38af03e445a33ff2deb22ef9817ab42e506cfb5cb10d2

    • SSDEEP

      24576:O94Lauo2BLrZ6dj7Wd50QKQIsBJXkQsUc/i/Egj87qLom0Y5m6Uy:O/uHrZ6WPKQ5X0QsUN/EgQ7qEmv

    Score
    10/10
    blustealerspywarestealer

    • BluStealer

      A Modular information stealer written in Visual Basic.

      stealerblustealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks