windealer | b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

3

b9f526eea6...5a.exe

windows7-x64

b9f526eea6...5a.exe

windows10-2004-x64

Sharing

General

Target

b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a
Size

348KB
Sample

240410-q43rpada9t
MD5

faa8eaed63c4e9f212ef81e2365dd9e8
SHA1

0d3a5725b6f740929b51f9a8611b4f843e2e07b1
SHA256

b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a
SHA512

eac27866c3719d59d285cbfd1fd8a85da67ce527c54104aee9d087e11966090f00266c2c85209d2a6a80085ee869745a97834b9de50c694e77f0a4eff106d8bc
SSDEEP

6144:vtiSdpwpk2cBAL5GVmC3zgq7fqEvangAYSpMYrbne8zNK1iy/6CWAzj:1iqwpkvBAL5GpzgsBvtfyajFhzj

Score

10^/10

windealer stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a.exe

Resource

win7-20240221-en

windealer stealer trojan

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a.exe

Resource

win10v2004-20231215-en

windealer stealer trojan

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a
- Size
  
  348KB
- MD5
  
  faa8eaed63c4e9f212ef81e2365dd9e8
- SHA1
  
  0d3a5725b6f740929b51f9a8611b4f843e2e07b1
- SHA256
  
  b9f526eea625eec1ddab25a0fc9bd847f37c9189750499c446471b7a52204d5a
- SHA512
  
  eac27866c3719d59d285cbfd1fd8a85da67ce527c54104aee9d087e11966090f00266c2c85209d2a6a80085ee869745a97834b9de50c694e77f0a4eff106d8bc
- SSDEEP
  
  6144:vtiSdpwpk2cBAL5GVmC3zgq7fqEvangAYSpMYrbne8zNK1iy/6CWAzj:1iqwpkvBAL5GpzgsBvtfyajFhzj
Score

10^/10

windealer stealer trojan
- Detect WinDealer information stealer
  stealer
- WinDealer
  WinDealer is an info stealer used by LuoYu group.
  stealer trojan windealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

windealerstealertrojan

behavioral2

windealerstealertrojan

© 2018-2025

Terms | Privacy