Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2256-3-0x00000000001F0000-0x00000000008A4000-memory.dmp

  • Size

    6.7MB

  • MD5

    ada9a7413ff6ce9dac49df6c2aad05c7

  • SHA1

    4dcded49eb79ae8efa55f686e037e00ce0f391c2

  • SHA256

    a910ee6037dad2e0f2953cb528b2351fc0d566c00fd90ce67f67747ac5902c3a

  • SHA512

    db51e06ea1c82890477419e27decc9c0e02cfa91290e1bd2fb1396fba5f441bf0367bbd09730c43461daef15f231ecb764f7e0214edf88967b6b506b50808a78

  • SSDEEP

    98304:bJF8SfFdbzhS2fcM7MUrN7JFnnXqRK8po8ax7xj:bvclUrZLXqXa

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2256-3-0x00000000001F0000-0x00000000008A4000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.