Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

07/01/2024, 18:26

240107-w3ameabffn 10

Analysis

  • max time kernel
    239s
  • max time network
    340s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    07/01/2024, 18:26

General

  • Target

    Samples 7/da52dc0f002d544115f1d64dbc1d7ec9569be150d59cfe0bfd3f6bb5aed54dc5.exe

  • Size

    254KB

  • MD5

    cf5cb731825863750c4b86a3df164db7

  • SHA1

    044889a9bb37f16cc09c6217006e74c1b6aba492

  • SHA256

    da52dc0f002d544115f1d64dbc1d7ec9569be150d59cfe0bfd3f6bb5aed54dc5

  • SHA512

    d8345f6cf580d1d29998e2b54facb82807e07a0a03539475e4bf7b8d21e91d60117057a28220d0f033f8c2c9ce36b3143ae511d639a7f446064c0cf32e9f6163

  • SSDEEP

    3072:NFRbzeTt7LnZ+TCUOM6qvzPOGQbFvSlnjWQYtJ4oEKq5X//lV17:XRbzep7LnoT/OxyTPIvSpS7tJC/vp

Score
10/10

Malware Config

Extracted

Family

stealc

C2

http://jaimemcgee.top

Attributes
  • url_path

    /40d570f44e84a454.php

rc4.plain

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Samples 7\da52dc0f002d544115f1d64dbc1d7ec9569be150d59cfe0bfd3f6bb5aed54dc5.exe
    "C:\Users\Admin\AppData\Local\Temp\Samples 7\da52dc0f002d544115f1d64dbc1d7ec9569be150d59cfe0bfd3f6bb5aed54dc5.exe"
    1⤵
      PID:588

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/588-1-0x0000000000A70000-0x0000000000B70000-memory.dmp

      Filesize

      1024KB

    • memory/588-2-0x00000000003B0000-0x00000000003CB000-memory.dmp

      Filesize

      108KB

    • memory/588-3-0x0000000000400000-0x000000000062D000-memory.dmp

      Filesize

      2.2MB

    • memory/588-4-0x0000000000400000-0x000000000062D000-memory.dmp

      Filesize

      2.2MB

    • memory/588-5-0x00000000003B0000-0x00000000003CB000-memory.dmp

      Filesize

      108KB