Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2064-3-0x0...ry.exe

windows7-x64

2064-3-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2064-3-0x00000000001B0000-0x00000000006AF000-memory.dmp

  • Size

    5.0MB

  • MD5

    edc66de1ac52e3b758a990e166db1784

  • SHA1

    d038ff1fca2ca1736ef808c1237508454a78676c

  • SHA256

    e0337ed971edbf1dd042509b250cf8d34ab56b0fc13384daf78e3d6d5542198f

  • SHA512

    e44a73529bd3ae38c7588cf5939001a70a3b202220af8ac55f4bf09c73fcded5054ac026040e1132e3ed48979070908b86a0b1358bb633c5f1d849365cc6bbd1

  • SSDEEP

    49152:aoUUm4JYY/H3MwfkaZ/eMlOtsuDmYE36:4Um4JYY/8wcaZGMstsuD2K

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2064-3-0x00000000001B0000-0x00000000006AF000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections