Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

c156f53674...61.exe

windows7-x64

10

c156f53674...61.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c156f5367443c436b6a54f16a725d261

  • Size

    693KB

  • Sample

    231222-rrttpacec2

  • MD5

    c156f5367443c436b6a54f16a725d261

  • SHA1

    774549155b8bf2a455db51444ed3cb277081ca6b

  • SHA256

    cba897dc82a468040a082fd6135edecb8dcdcd0f0fe1375adeaeff3262cc6504

  • SHA512

    b796c81cba0ba75cda33252adbf4ee40b659a7c714e4bce1e81c3d39ada8555bd890ad9930c3ae9657e3460b696e3a26514a960a8d86b968953859aa7ce7be3b

  • SSDEEP

    12288:EiJe4CK2mMmVlyJFlIjh5eSrrFowfviTwkAKc:EDK2mRi3IjjeZwfvi0/

Score
10/10
blustealerstealer

Malware Config

Targets

    • Target

      c156f5367443c436b6a54f16a725d261

    • Size

      693KB

    • MD5

      c156f5367443c436b6a54f16a725d261

    • SHA1

      774549155b8bf2a455db51444ed3cb277081ca6b

    • SHA256

      cba897dc82a468040a082fd6135edecb8dcdcd0f0fe1375adeaeff3262cc6504

    • SHA512

      b796c81cba0ba75cda33252adbf4ee40b659a7c714e4bce1e81c3d39ada8555bd890ad9930c3ae9657e3460b696e3a26514a960a8d86b968953859aa7ce7be3b

    • SSDEEP

      12288:EiJe4CK2mMmVlyJFlIjh5eSrrFowfviTwkAKc:EDK2mRi3IjjeZwfvi0/

    Score
    10/10
    blustealerstealer

    • BluStealer

      A Modular information stealer written in Visual Basic.

      stealerblustealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks