Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

4896-47-0x...ry.exe

windows7-x64

4896-47-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4896-47-0x0000000000150000-0x0000000000634000-memory.dmp

  • Size

    4.9MB

  • MD5

    cf1a94e9f67d91a8ebe5a5ca20559bea

  • SHA1

    2b03aaf8a54ca9e3327ca2c3757f423f44a19e46

  • SHA256

    0e180ea4adc2f0ce91f3dd2482c19e4cd159c26026f079ca840a0fb46bfc6abf

  • SHA512

    092e9b65deb0dfcd6342a420b9ae914748d090fcfb25a0572f74f5f3c8d88196ae7aedd336ba03a31c3d3f1441e43cec6f493c613afd0c1cc5687de0cbb56199

  • SSDEEP

    49152:0eMIn4rSKnenfwJIT7UpNBKyMRLxefNAhuedV8aRYNm3+8Ied6d8VyXARi6ksfiS:g8UQRi6ksfiraz5hKFoqQUyxl

Score
10/10
stokstealc

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4896-47-0x0000000000150000-0x0000000000634000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections