Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9d84bd88528a492f52572cea1a2689c8c6a24a51952fefe1ab9b906a2db55851

  • Size

    1.1MB

  • Sample

    240725-2pd1kazcln

  • MD5

    5c7ff49de036381730348329bc5bc465

  • SHA1

    206188a617378901c7cc8a1045846c5c5170eb63

  • SHA256

    9d84bd88528a492f52572cea1a2689c8c6a24a51952fefe1ab9b906a2db55851

  • SHA512

    6cdc8e7f67923bd029c622bac8036ac418c6476b7db6f979e58dc393b3062ff6f667daaec5e2215fea7170e3e2e91bccc71a1dfc1eb402c6aae5f7541d08b657

  • SSDEEP

    24576:IiMaTshEaA6WoEliUCPqTnZsvJF4jzhyXPBihpKzZyCQY32bMh:hMkJ9EEoknZsvIXhyXrzZyY32b

Malware Config

Extracted

Family

stealc

Botnet

sila

C2

http://85.28.47.31

Attributes
  • url_path

    /5499d72b3a3e55be.php

Targets

    • Target

      9d84bd88528a492f52572cea1a2689c8c6a24a51952fefe1ab9b906a2db55851

    • Size

      1.1MB

    • MD5

      5c7ff49de036381730348329bc5bc465

    • SHA1

      206188a617378901c7cc8a1045846c5c5170eb63

    • SHA256

      9d84bd88528a492f52572cea1a2689c8c6a24a51952fefe1ab9b906a2db55851

    • SHA512

      6cdc8e7f67923bd029c622bac8036ac418c6476b7db6f979e58dc393b3062ff6f667daaec5e2215fea7170e3e2e91bccc71a1dfc1eb402c6aae5f7541d08b657

    • SSDEEP

      24576:IiMaTshEaA6WoEliUCPqTnZsvJF4jzhyXPBihpKzZyCQY32bMh:hMkJ9EEoknZsvIXhyXrzZyY32b

    • Stealc

      Stealc is an infostealer written in C++.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks