Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2072-612-0x0000000000020000-0x0000000000524000-memory.dmp

  • Size

    5.0MB

  • MD5

    0d43df742ae96b9b672be0bbaea1c8a3

  • SHA1

    a49ba27d08b01da4e990072b6caed55a30beacde

  • SHA256

    1c076666f2b208272f5fdaaa7268f2dea2f1f3de108e15e984a50c092ba9653d

  • SHA512

    43d685e7fcf695a3918b651d40eb527ac625c61316dbbc7fe292a3b017cbda87c3143441022579ee1f1cf80d36c9fcf4cd3a4f5b358b97af2e2073396b406f29

  • SSDEEP

    49152:IWA2l8uI/feD9XadQJi5piJM7FU3q5suf5M/hjSMRo:vl8JfeD9XadQIYM7+65s65Eg

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2072-612-0x0000000000020000-0x0000000000524000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections