Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2188-106-0x0000000000890000-0x0000000000FBC000-memory.dmp

  • Size

    7.2MB

  • MD5

    c0f300dc92f693140af5bf2ef466b685

  • SHA1

    c9f3eea116fb16c8576694f1d383595e93c1b25a

  • SHA256

    11029d3de68cfc4751c2836b1bec6069705fad8dbea96b5dfb4ca4d76deb68ce

  • SHA512

    990ecff5a0545fe54832bdb77abc3d4976c82b392885c2de3a501d18822ce953cfad03e46262e0efe7f5a3a7d92089527c29b045c3f19e8d21146145370aed76

  • SSDEEP

    98304:q6GJtF4RIwybvxnr+3R4aZoauOAmVBA8kvoG43nDHfuMxl4twB9RK:hGh6ybvaFk8PGqHfuheK

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

tale

C2

http://185.215.113.206

Attributes
  • url_path

    /6c4adf523b719729.php

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2188-106-0x0000000000890000-0x0000000000FBC000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections