Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2528-3-0x0000000000820000-0x0000000000D13000-memory.dmp

  • Size

    4.9MB

  • MD5

    1e72ba76a704c1e5421cbcce45c9a084

  • SHA1

    7cb0de76194e0dd94354e08b6d2435e6e23b704b

  • SHA256

    7aad5c33d534dc3f0432fa06b07b56344f8bf1558aa677e9482ba2daa0c6de3f

  • SHA512

    dc108966c925b591758b6ae1500a85fe7f29f685fa576aa6caa7d7c6780690938039793fa517582e4ffde09450b4307b3e33fd9da6d73798b56155af9c7610f7

  • SSDEEP

    49152:0BfIwAazK83ncTZYJPqHoZusbLH4V221T:EIwAazz3cTZYJPFZusPHz21

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2528-3-0x0000000000820000-0x0000000000D13000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections