Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file

  • Size

    308KB

  • Sample

    231011-rqwlwsef96

  • MD5

    07e1135280b0856cbf74d013e5aed90e

  • SHA1

    3a9fbc8d91356e610f02ef5998df998f972a70db

  • SHA256

    b2aa1408b77d5272d0e9f7250e196124fd2cc5d86f8ef90abe0ec37ea27b41af

  • SHA512

    fdc735c387affcd3a2ecb3d1d58fc43dfd7cfcb9ae25928a279737bf73a5de5d678bc411843a3cd65608bcacebd166321360511d961ec25e18e727b52a9e28f4

  • SSDEEP

    3072:SDdLb8Lyom0PXxdwglElsoFBq7JvlbCKQw0G9jSa3p10IUxwVapbOU:6Lb8LdmkhdwgKPiVvJQw0GlSI2tpK

Malware Config

Extracted

Family

stealc

C2

http://bryanzachary.top

Attributes
  • url_path

    /e9c345fc99a4e67e.php

rc4.plain

Targets

    • Target

      file

    • Size

      308KB

    • MD5

      07e1135280b0856cbf74d013e5aed90e

    • SHA1

      3a9fbc8d91356e610f02ef5998df998f972a70db

    • SHA256

      b2aa1408b77d5272d0e9f7250e196124fd2cc5d86f8ef90abe0ec37ea27b41af

    • SHA512

      fdc735c387affcd3a2ecb3d1d58fc43dfd7cfcb9ae25928a279737bf73a5de5d678bc411843a3cd65608bcacebd166321360511d961ec25e18e727b52a9e28f4

    • SSDEEP

      3072:SDdLb8Lyom0PXxdwglElsoFBq7JvlbCKQw0G9jSa3p10IUxwVapbOU:6Lb8LdmkhdwgKPiVvJQw0GlSI2tpK

    • Stealc

      Stealc is an infostealer written in C++.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks