Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    Cooperbuild34.exe

  • Size

    7.0MB

  • Sample

    250319-qky96azr15

  • MD5

    556555f19852e8685dc8d465ef09b815

  • SHA1

    3e1e81c632d97922df7b23ca6f4d1c2eaab303ea

  • SHA256

    18cdbd760961bbe45ab6dac098badab8556e5c28cd24744c58f84eb3255da992

  • SHA512

    0e8e7e3829651c49b518adb2d8e85821bc721412376988d7ec441e40711bf016077e32a31f9e5f82ae55d40a08b5a1f5429906b00c751afd8a961e9a83b702bd

  • SSDEEP

    196608:bMbuV25DeTD+oqzukSIlLtIY79n8SI75bWAXAkuujCPX9YG9he5GnQCAJKNc:8A403qakSoR7tfI7ZtXADu8X9Y95GQLJ

Score
10/10

Malware Config

Extracted

Family

stealerium

C2

https://api.telegram.org/bot1616004787:AAH60oNqVa82nffKp0gB2yn5A_jmiTy0_XY/sendMessage?chat_id=

Targets

    • Target

      Cooperbuild34.exe

    • Size

      7.0MB

    • MD5

      556555f19852e8685dc8d465ef09b815

    • SHA1

      3e1e81c632d97922df7b23ca6f4d1c2eaab303ea

    • SHA256

      18cdbd760961bbe45ab6dac098badab8556e5c28cd24744c58f84eb3255da992

    • SHA512

      0e8e7e3829651c49b518adb2d8e85821bc721412376988d7ec441e40711bf016077e32a31f9e5f82ae55d40a08b5a1f5429906b00c751afd8a961e9a83b702bd

    • SSDEEP

      196608:bMbuV25DeTD+oqzukSIlLtIY79n8SI75bWAXAkuujCPX9YG9he5GnQCAJKNc:8A403qakSoR7tfI7ZtXADu8X9Y95GQLJ

    Score
    10/10
    • Stealerium

      An open source info stealer written in C# first seen in May 2022.

    • Stealerium family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks