Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

Setup.exe

windows7-x64

10

Setup.exe

windows10-1703-x64

10

Setup.exe

windows10-2004-x64

10

Setup.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Setup.zip

  • Size

    12.2MB

  • Sample

    240707-eqjacawbjd

  • MD5

    e02e15bf94b1b6a81336dbed8b3c7d30

  • SHA1

    1ef7050bb3d1042f669f4a432ea4f1df23e516a5

  • SHA256

    59f20114929a66a4c6243ae9d416192f0b7a584c6d3a07253e0cc69776b4de46

  • SHA512

    ca2c368ecd3d3ff50bcbce0ca1cf7f6a3825d600ac3b2fa3a31edd52dad9d569fab5aaae36db2e16ec866857cf463190fdcbf6909c006e32d93716126985dba9

  • SSDEEP

    196608:CnTu6c4Xdvslpr+c9HdoxcvXnQIRISojiSJRFTIxQhzjt72oejl1eLnO8+hgwWh2:j4izT9QmxCL+wMoe/inOXmCYW

Score
10/10
stealcpuarospywarestealer

Malware Config

Extracted

Family

stealc

Botnet

Puaro

C2

https://9507c272a51ce8cefc8761591b2c50e6.fit

Attributes
  • url_path

    /2fca4d4264af2833.php

Targets

    • Target

      Setup.exe

    • Size

      663.4MB

    • MD5

      70a9e51d9777a02427404e4dc2325f0f

    • SHA1

      b340348b78dcbbdc49dc9206f68aa3950723b964

    • SHA256

      f9f5fe8a6d4ef35fdacc5623b1dc689be3ea89c61efdf68e0ddf449916396f05

    • SHA512

      65888e9a446880cd8911ed56047392c00735fe484530962e8d1b70256b082c9eff822b4db0c84db689e5f11331b56acfa62d86b0a496f8b6b744380853b86ebe

    • SSDEEP

      196608:Xpcugy7TlXNdj+P64+SPrW7hOOo4j704ehNVhV98x+L5rCZhwNNwL84XiOHWgE:Xpcu7k6BkOxU4o

    Score
    10/10
    stealcpuarospywarestealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks