Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1a0747748452e27793299ed9e363904bab4cc3897160254c7fb4d901ce8d5023.exe

  • Size

    191KB

  • Sample

    240822-nktzbsvane

  • MD5

    435d5310dc3713863ef0b4c4f9d5eeac

  • SHA1

    8feed34f6c03cd883bfce83aee29e411e7261ad5

  • SHA256

    1a0747748452e27793299ed9e363904bab4cc3897160254c7fb4d901ce8d5023

  • SHA512

    579d0e1a7cb3e29493085bb47a37b3e5e7c7dbfad010a9cb9407341cb8cad40a3ec1289311b7be38873f01d08fbf8ba7ed4f1389dd8f5794334040d7ca8aeac6

  • SSDEEP

    3072:6k9c0KFj5qj6o8KaxfE54HnnGqaKl+b2n8OzpPgSFmpKa2:6kO/j5K62aOanGqCbAXPgSFAKa2

Malware Config

Extracted

Family

stealc

Botnet

shell

C2

http://185.196.9.135

Attributes
  • url_path

    /daecd5ae9c3a5474.php

Targets

    • Target

      1a0747748452e27793299ed9e363904bab4cc3897160254c7fb4d901ce8d5023.exe

    • Size

      191KB

    • MD5

      435d5310dc3713863ef0b4c4f9d5eeac

    • SHA1

      8feed34f6c03cd883bfce83aee29e411e7261ad5

    • SHA256

      1a0747748452e27793299ed9e363904bab4cc3897160254c7fb4d901ce8d5023

    • SHA512

      579d0e1a7cb3e29493085bb47a37b3e5e7c7dbfad010a9cb9407341cb8cad40a3ec1289311b7be38873f01d08fbf8ba7ed4f1389dd8f5794334040d7ca8aeac6

    • SSDEEP

      3072:6k9c0KFj5qj6o8KaxfE54HnnGqaKl+b2n8OzpPgSFmpKa2:6kO/j5K62aOanGqCbAXPgSFAKa2

MITRE ATT&CK Enterprise v15

Tasks