Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

35192925cb...68.exe

windows7-x64

10

35192925cb...68.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35192925cbaee8be87233ad7ff3ddc451e82595584aef28ae90568189cc39a68

  • Size

    197KB

  • Sample

    240819-x9g6hawbqk

  • MD5

    cfb2eb856c183f53bdba297c340e324e

  • SHA1

    7be0a5e36ebb4187262a43d3f3f635ff6ac54c45

  • SHA256

    35192925cbaee8be87233ad7ff3ddc451e82595584aef28ae90568189cc39a68

  • SHA512

    64e4d2b1705367f4ac3d6ec946989663bcf84706dc5ae0023c8f08ad570db481cfb7e74e58eac19d959e31ff6a74989baca40ce293b367c381a6a0996b84a570

  • SSDEEP

    3072:8WpdvpXm6STi7//Nigecsvxf654sS8M/rMjb26wcheg1COg8m+/XQIDst:PnvpXmiLmxD/rAb22eehPt

Score
10/10
stealcnorddiscoverystealer

Malware Config

Extracted

Family

stealc

Botnet

nord

C2

http://185.215.113.100

Attributes
  • url_path

    /e2b1563c6670f193.php

Targets

    • Target

      35192925cbaee8be87233ad7ff3ddc451e82595584aef28ae90568189cc39a68

    • Size

      197KB

    • MD5

      cfb2eb856c183f53bdba297c340e324e

    • SHA1

      7be0a5e36ebb4187262a43d3f3f635ff6ac54c45

    • SHA256

      35192925cbaee8be87233ad7ff3ddc451e82595584aef28ae90568189cc39a68

    • SHA512

      64e4d2b1705367f4ac3d6ec946989663bcf84706dc5ae0023c8f08ad570db481cfb7e74e58eac19d959e31ff6a74989baca40ce293b367c381a6a0996b84a570

    • SSDEEP

      3072:8WpdvpXm6STi7//Nigecsvxf654sS8M/rMjb26wcheg1COg8m+/XQIDst:PnvpXmiLmxD/rAb22eehPt

    Score
    10/10
    stealcnorddiscoverystealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks