Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

4488-1264-...ry.exe

windows7-x64

1

4488-1264-...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4488-1264-0x0000000000E30000-0x00000000014C0000-memory.dmp

  • Size

    6.6MB

  • MD5

    e9342d179b246595f67cbda7df8cb437

  • SHA1

    c3f011816edd33483a2a5846e9f0d087ab5d8895

  • SHA256

    ba2b7661d08a71adb20c571a0c8eac65ba4d46a10b372d07ecf039a29232dff6

  • SHA512

    be03b15eb7662669dde7876c2fd688fe1e408d869643eeda87d95601ed8246faf5e1dbef9944728b18a4e6056b707fa52316fb6fb4b1b000a562c9f59a0d83af

  • SSDEEP

    98304:9egfdT7yDz18N/ZIwbZBfquEsXKs3BU3o9kY4/kB:I8XRF8uj6Cm3oG

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4488-1264-0x0000000000E30000-0x00000000014C0000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections