Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

202409189a...xz.exe

windows7-x64

3

202409189a...xz.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    202409189a8a48df98c417ebe68fbfab747da810poetratsnatchzxxz

  • Size

    23.5MB

  • Sample

    240919-hxtlfawhmk

  • MD5

    9a8a48df98c417ebe68fbfab747da810

  • SHA1

    08e29f579a672e779544af5fde8641ac1229389f

  • SHA256

    c295fd78c5bca527529367923c0c296d30c2d2165f51f3ad5ce90026f9c3486c

  • SHA512

    a49e7dc2ef3c34710d1e69ae64868b1f12f833503b8f4d8e46bda67bd8e779cc6dd85eabeb44855503eda18063934df90b358fcd4596739e538b6551d2f9e09d

  • SSDEEP

    196608:rOWl6g7h8Vi1QtqtQ9lScr+WV0mIWNemfM3OyVw5y:r8cGSdWV0mHNRr

Score
10/10
stealcdefaultdiscoverystealer

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://154.216.18.13

Attributes
  • url_path

    /1a6bc231b835769a.php

Targets

    • Target

      202409189a8a48df98c417ebe68fbfab747da810poetratsnatchzxxz

    • Size

      23.5MB

    • MD5

      9a8a48df98c417ebe68fbfab747da810

    • SHA1

      08e29f579a672e779544af5fde8641ac1229389f

    • SHA256

      c295fd78c5bca527529367923c0c296d30c2d2165f51f3ad5ce90026f9c3486c

    • SHA512

      a49e7dc2ef3c34710d1e69ae64868b1f12f833503b8f4d8e46bda67bd8e779cc6dd85eabeb44855503eda18063934df90b358fcd4596739e538b6551d2f9e09d

    • SSDEEP

      196608:rOWl6g7h8Vi1QtqtQ9lScr+WV0mIWNemfM3OyVw5y:r8cGSdWV0mHNRr

    Score
    10/10
    discoverystealcdefaultstealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks