Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2de2db388c80aeb3ca2fb3d6d63286da28fd0e84abc9965b1e16936bc8109e1e

  • Size

    226KB

  • Sample

    240508-ltff7aha67

  • MD5

    ef9806bb54c2f630476b88f703305415

  • SHA1

    753f3ca7aec9bd521e6a5ebcb3367b782f3de810

  • SHA256

    2de2db388c80aeb3ca2fb3d6d63286da28fd0e84abc9965b1e16936bc8109e1e

  • SHA512

    a859a8471141b646876ec61d4b91a67d6c9ccc156d07583199d93b417d8aa3783e11244b5b9af8be1465ef1833746d5861e2036a056301a45e54579bafe3e30a

  • SSDEEP

    3072:ksuN0wGJPImA+bzuSqV/+68fRgVf7rmFdYesl23rxONC4T+HzeQ:UpHd538fRgVfodJs+n4Toq

Score
10/10
stealcdiscoverystealer

Malware Config

Extracted

Family

stealc

C2

http://185.172.128.150

Attributes
  • url_path

    /c698e1bc8a2f5e6d.php

Targets

    • Target

      2de2db388c80aeb3ca2fb3d6d63286da28fd0e84abc9965b1e16936bc8109e1e

    • Size

      226KB

    • MD5

      ef9806bb54c2f630476b88f703305415

    • SHA1

      753f3ca7aec9bd521e6a5ebcb3367b782f3de810

    • SHA256

      2de2db388c80aeb3ca2fb3d6d63286da28fd0e84abc9965b1e16936bc8109e1e

    • SHA512

      a859a8471141b646876ec61d4b91a67d6c9ccc156d07583199d93b417d8aa3783e11244b5b9af8be1465ef1833746d5861e2036a056301a45e54579bafe3e30a

    • SSDEEP

      3072:ksuN0wGJPImA+bzuSqV/+68fRgVf7rmFdYesl23rxONC4T+HzeQ:UpHd538fRgVfodJs+n4Toq

    Score
    10/10
    stealcdiscoverystealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks