Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    832-896-0x0000000001340000-0x0000000001A83000-memory.dmp

  • Size

    7.3MB

  • MD5

    0253d717822d216ee9dc14fdd9bc4730

  • SHA1

    73c12baf3b07ee274da635fc4b406aea3de9c0e3

  • SHA256

    6d969dae1092af3fb9a6f0c3f9af10e1122137c52d7517c138611ad3127a908f

  • SHA512

    74f9194e8d398af0d7b40938b4294460f86dc7f6f1a565bdcad95b3e6d5b5b8844a09bb107c91b7e8e159e69259aae98d7d4d949df87f585d4393dd70171d76b

  • SSDEEP

    98304:tsGJtF4RIwybxZ2kz5vtWdDZ1s34/LSC/zq0q6On:aGh6ybRp4ZZ1s3V8w

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

tale

C2

http://185.215.113.206

Attributes
  • url_path

    /6c4adf523b719729.php

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 832-896-0x0000000001340000-0x0000000001A83000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections