Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    file.exe

  • Size

    265KB

  • Sample

    231103-j69vfsgd86

  • MD5

    62682dd05ce9c8d39825c021ed80bbbd

  • SHA1

    a4d81f0d71f6e26ac4673db25aa312407221c707

  • SHA256

    88b485b2505fa50a505d0cddb6f7ea10a60d137e008a0e29a04e18efc63a1cd7

  • SHA512

    e92839f4881c47af34b34380ca878c92332575e9f1ca84fb54cf3d68d588323f430f2916d03243fe846e2539212118f3f14bea7c7cafafeda3dc5d1251494601

  • SSDEEP

    3072:/DuFuMxDFtkZAUo4iOYxRW5kYXLgQ/ws1/wNb8Tobsyxd:KuMxjkZA/4TYmtXEQpwlIy

Malware Config

Extracted

Family

stealc

C2

http://henryjackson.icu

Attributes
  • url_path

    /e9c345fc99a4e67e.php

rc4.plain

Targets

    • Target

      file.exe

    • Size

      265KB

    • MD5

      62682dd05ce9c8d39825c021ed80bbbd

    • SHA1

      a4d81f0d71f6e26ac4673db25aa312407221c707

    • SHA256

      88b485b2505fa50a505d0cddb6f7ea10a60d137e008a0e29a04e18efc63a1cd7

    • SHA512

      e92839f4881c47af34b34380ca878c92332575e9f1ca84fb54cf3d68d588323f430f2916d03243fe846e2539212118f3f14bea7c7cafafeda3dc5d1251494601

    • SSDEEP

      3072:/DuFuMxDFtkZAUo4iOYxRW5kYXLgQ/ws1/wNb8Tobsyxd:KuMxjkZA/4TYmtXEQpwlIy

    • Stealc

      Stealc is an infostealer written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks