Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    58825871ca0dfd21bc75bb69b99d2e47.exe

  • Size

    262KB

  • Sample

    231011-mgtzgsgf61

  • MD5

    58825871ca0dfd21bc75bb69b99d2e47

  • SHA1

    eeeaed2f0abd24e16462e2a405ef66a7cbcca5ff

  • SHA256

    282aa1b81b2c4cbe70b8a71d3c0095902e248c4940456b82f36f078765fc395a

  • SHA512

    cae54b636680c0910f9c4c72a3851f5ee85ea15a223e0ee6def861883591bb1208f6da3436f5c964e26e86e9aa99cd89763a6a660319c0268d1f1795190513c1

  • SSDEEP

    3072:qnrj/Xh6m1LmKys824ldJA5o2lm4XSancY4T5cz6TOac:oAm1Dvn4ldgG4Cybz6TO

Malware Config

Extracted

Family

stealc

C2

http://jesseaustin.top

Attributes
  • url_path

    /e9c345fc99a4e67e.php

rc4.plain
1
8825171503463345092444701135

Targets

    • Target

      58825871ca0dfd21bc75bb69b99d2e47.exe

    • Size

      262KB

    • MD5

      58825871ca0dfd21bc75bb69b99d2e47

    • SHA1

      eeeaed2f0abd24e16462e2a405ef66a7cbcca5ff

    • SHA256

      282aa1b81b2c4cbe70b8a71d3c0095902e248c4940456b82f36f078765fc395a

    • SHA512

      cae54b636680c0910f9c4c72a3851f5ee85ea15a223e0ee6def861883591bb1208f6da3436f5c964e26e86e9aa99cd89763a6a660319c0268d1f1795190513c1

    • SSDEEP

      3072:qnrj/Xh6m1LmKys824ldJA5o2lm4XSancY4T5cz6TOac:oAm1Dvn4ldgG4Cybz6TO

    • Stealc

      Stealc is an infostealer written in C++.

    • Downloads MZ/PE file

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.