Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2528-3-0x0000000000020000-0x000000000051E000-memory.dmp

  • Size

    5.0MB

  • MD5

    495193dd7eacc5d27a5481be13b50b8c

  • SHA1

    ee66155e2c55dc7c1418d584a27f4185fcb066a5

  • SHA256

    ad7125f6a28719ec617c4dec085b174177bc254b1e5420884d468f6fd462ab29

  • SHA512

    c9ab06ecba72dcf579dd6a4b4b3dac99aecd647cbf47f89de28c1b57275155a214dbfecabec74e5393874c98f3287831d6ba33b5f8a0d54c2923a2730a0c6006

  • SSDEEP

    49152:fDSfv1hZ3bCD872uazzKdePOIfzn92Cihh1T1:+1hZL52dyIfznbqvJ

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2528-3-0x0000000000020000-0x000000000051E000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections