Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

4268-47-0x...ry.exe

windows7-x64

4268-47-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4268-47-0x0000000000A70000-0x0000000000F61000-memory.dmp

  • Size

    4.9MB

  • MD5

    52f96d9e26056951b8152329c1e0c8dc

  • SHA1

    81ba4ea551e320f4425a70d222534eeba0a1a2ea

  • SHA256

    022cd6f381314db0adf87d95a05c5cfca253ca1c82d02e7f1adc2b69a120634b

  • SHA512

    0a42f102b83b47050ae85ddbe6695f4da4a176db81a5b931617a2b8de4743bb45a81a164f3407815fe7e14f6321dfd3660f755527e4a47f681004f50335a4625

  • SSDEEP

    49152:79jIb6b6i9KvgjHGk/MAKlhAyD7Xb5do6wcT3L2K0E:BjIb6b6i9KvgjGk/bChH31doKL2K0E

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4268-47-0x0000000000A70000-0x0000000000F61000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections