Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

3028-74-0x...ry.exe

windows7-x64

10

3028-74-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3028-74-0x0000000000030000-0x0000000000747000-memory.dmp

  • Size

    7.1MB

  • MD5

    adebd4de9315fe3413761ec9b05fb8d9

  • SHA1

    c1cd40c2a179e4db5e8aac08f35aef8e1f80c1be

  • SHA256

    ad03223cca8071f096d84b92d681b56aee3a67526d60dcda58e98c3e3a3d64e9

  • SHA512

    5daf64a1dcda28ddf384df92ce7a67d63013e8c7bece0ae2e4262fa66a141885c6f82bd7508cddb3a99cd3419db56152d6903c62ff936b80584812ed8497ba41

  • SSDEEP

    98304:HgGJtF4RIwybTeZ/tP1KjciKilN5BpFJ4Ir8sS+iry+u:AGh6ybGGKS5B4+irI

Score
10/10
talestealc

Malware Config

Extracted

Family

stealc

Botnet

tale

C2

http://185.215.113.206

Attributes
  • url_path

    /6c4adf523b719729.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3028-74-0x0000000000030000-0x0000000000747000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections