Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0461541abae499104970d012841db7bb7bb02ea1d40d5c295a061b38e6fb7231

  • Size

    3.8MB

  • Sample

    250214-xxd83sxjhj

  • MD5

    e91657014183219fd6d6535baae97b7c

  • SHA1

    c7b3cf4cd1f6f52ac52b427ad25509dc6c990289

  • SHA256

    0461541abae499104970d012841db7bb7bb02ea1d40d5c295a061b38e6fb7231

  • SHA512

    69cb9171402023578727a4f7183c24ac63896409a9fefcaad432bde41060bd4c99345865b5b88705297fa91c777f6f3e094d6b522863e628a9ef815730f9c36a

  • SSDEEP

    98304:FkqXf0FlL9nrYAWAZi6sfLxkuahjCOeX9YG9see5GnRyCAm0makxH13:FkSIlLtzWAXAkuujCPX9YG9he5GnQCAo

Malware Config

Extracted

Family

stealerium

C2

https://api.telegram.org/bot6926474815:AAFx9tLAnf5OAVQZp2teS3G2_6T1wCP67xM/sendMessage?chat_id=-4224073938

Targets

    • Target

      0461541abae499104970d012841db7bb7bb02ea1d40d5c295a061b38e6fb7231

    • Size

      3.8MB

    • MD5

      e91657014183219fd6d6535baae97b7c

    • SHA1

      c7b3cf4cd1f6f52ac52b427ad25509dc6c990289

    • SHA256

      0461541abae499104970d012841db7bb7bb02ea1d40d5c295a061b38e6fb7231

    • SHA512

      69cb9171402023578727a4f7183c24ac63896409a9fefcaad432bde41060bd4c99345865b5b88705297fa91c777f6f3e094d6b522863e628a9ef815730f9c36a

    • SSDEEP

      98304:FkqXf0FlL9nrYAWAZi6sfLxkuahjCOeX9YG9see5GnRyCAm0makxH13:FkSIlLtzWAXAkuujCPX9YG9he5GnQCAo

    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

    • Stealerium family

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks