Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

d5cf11dda7...18.exe

windows7-x64

10

d5cf11dda7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d5cf11dda7176e2123bdbd5e184c24e7_JaffaCakes118

  • Size

    2.4MB

  • Sample

    240909-hjv74swbpl

  • MD5

    d5cf11dda7176e2123bdbd5e184c24e7

  • SHA1

    0609e5ca0011bbbd5e75ce1e73909a8cbc23880c

  • SHA256

    f13b822a76e800b7591000e93616685cf05f528ff52fcd9a9372e50629fbd734

  • SHA512

    b187871247af997d14acbf0de3a313b3b63b9428a61ffe8dbd36020f4077d212974c8f5208bf077c02986f1ab8bc6503c3aa2da7e7b364d27b1856fdc817c54e

  • SSDEEP

    49152:pInY06bvoFZCtOQ0IfBsyOnZsszhrcVUONLxwC7WTUIhIpt4ptKF1yMI5n:pi5yvorUfqvzhkmC7F87KqVn

Score
10/10
stealthworkerbotnetdiscovery

Malware Config

Extracted

Family

stealthworker

Version

3.06

C2

http://teemsystems.info:8888

Targets

    • Target

      d5cf11dda7176e2123bdbd5e184c24e7_JaffaCakes118

    • Size

      2.4MB

    • MD5

      d5cf11dda7176e2123bdbd5e184c24e7

    • SHA1

      0609e5ca0011bbbd5e75ce1e73909a8cbc23880c

    • SHA256

      f13b822a76e800b7591000e93616685cf05f528ff52fcd9a9372e50629fbd734

    • SHA512

      b187871247af997d14acbf0de3a313b3b63b9428a61ffe8dbd36020f4077d212974c8f5208bf077c02986f1ab8bc6503c3aa2da7e7b364d27b1856fdc817c54e

    • SSDEEP

      49152:pInY06bvoFZCtOQ0IfBsyOnZsszhrcVUONLxwC7WTUIhIpt4ptKF1yMI5n:pi5yvorUfqvzhkmC7F87KqVn

    Score
    10/10
    stealthworkerbotnetdiscovery

    • StealthWorker

      StealthWorker is golang-based brute force malware.

      botnetstealthworker

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks